# Properties passed in
HOSTNAME=onap-aaf-gui-c4676b95c-fc4pn
aaf_locator_container=oom
aaf_release=Frankfurt
aaf_locator_container_ns=onap
aaf_locator_name=%NS.%N
aaf_locate_url=https://aaf-locate.onap:8095
cadi_longitude=-72.0
cadi_latitude=38.0
aaf_locator_public_fqdn=aaf.osaaf.org
cadi_x509_issuers=CN=intermediateCA_1,
aaf_env=DEV
aaf_locator_name.oom=%CNS.%NS.%N
Set Identities
Clean up directory /opt/app/osaaf/local
ls: /opt/app/osaaf/local: No such file or directory
bin/agent.sh: line 90: /opt/app/osaaf/local/VERSION: No such file or directory
Decode
Setup ONAP Test CAs and Signers
Bootstrap Creation of Keystore from Signer
Bootstrap AAF Certificate
bootstrap.sh: line 89: [: aaf.osaaf.org: integer expression expected
Generating a RSA private key
.....................................................................................+++++
............................................................................+++++
writing new private key to '/tmp/aaf.bootstrap.key'
-----
Sign it
Using configuration from openssl.conf
Check that the request matches the signature
Signature ok
Certificate Details:
        Serial Number: 96139972664 (0x1662639038)
        Validity
            Not Before: Sep  8 12:10:44 2022 GMT
            Not After : Sep  8 12:10:44 2023 GMT
        Subject:
            countryName               = US
            organizationName          = ONAP
            organizationalUnitName    = aaf@aaf.osaaf.org
            organizationalUnitName    = OSAAF
            commonName                = aaf.osaaf.org
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Cert Type: 
                SSL Client, SSL Server
            Netscape Comment: 
                OpenSSL Generated Server Certificate
            X509v3 Subject Key Identifier: 
                BC:7E:AC:62:6E:EA:F7:C5:59:C5:01:B4:4F:45:72:0A:5D:D9:8F:DB
            X509v3 Authority Key Identifier: 
                keyid:81:F7:99:5B:10:B9:C8:8C:DE:F3:52:5E:EA:4E:69:A0:43:3E:AC:DD
                DirName:/OU=OSAAF/O=ONAP/C=US
                serial:07

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:aaf.osaaf.org, DNS:aaf.osaaf.org, DNS:service.aaf.osaaf.org, DNS:locate.aaf.osaaf.org, DNS:oauth.aaf.osaaf.org, DNS:token.aaf.osaaf.org, DNS:introspect.aaf.osaaf.org, DNS:gui.aaf.osaaf.org, DNS:cm.aaf.osaaf.org, DNS:hello.aaf.osaaf.org, DNS:aaf-service, DNS:aaf-service.onap, DNS:aaf-locate, DNS:aaf-locate.onap, DNS:aaf-oauth, DNS:aaf-oauth.onap, DNS:aaf-token, DNS:aaf-token.onap, DNS:aaf-introspect, DNS:aaf-introspect.onap, DNS:aaf-gui, DNS:aaf-gui.onap, DNS:aaf-cm, DNS:aaf-cm.onap, DNS:aaf-hello, DNS:aaf-hello.onap
Certificate is to be certified until Sep  8 12:10:44 2023 GMT (365 days)

Write out database with 1 new entries
Data Base Updated
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96139972664 (0x1662639038)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=ONAP, OU=OSAAF, CN=intermediateCA_9
        Validity
            Not Before: Sep  8 12:10:44 2022 GMT
            Not After : Sep  8 12:10:44 2023 GMT
        Subject: C=US, O=ONAP, OU=aaf@aaf.osaaf.org, OU=OSAAF, CN=aaf.osaaf.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8b:d4:44:c2:f4:93:62:87:7d:92:2e:b4:f2:
                    38:c5:ec:bc:eb:44:ba:33:34:58:84:5c:24:9a:2b:
                    07:0d:9a:5d:52:83:cc:e9:d2:96:e6:b9:e9:fd:43:
                    be:2b:b0:e5:09:e4:8f:ec:fb:03:01:00:52:ce:86:
                    d3:47:e8:36:c0:2d:a8:7e:f3:0b:eb:cd:08:be:d9:
                    b3:fb:bb:9a:1e:0e:47:94:b0:43:a4:3c:e2:b3:e7:
                    95:0a:7a:32:29:a0:8f:fb:b9:1e:b7:0e:1c:da:7e:
                    45:30:02:75:07:f9:67:90:c1:af:1f:67:97:3a:45:
                    11:96:e9:8c:2b:06:fd:a6:64:ca:0f:68:61:29:35:
                    af:02:5e:7b:69:c5:f4:6f:f2:7d:46:6b:0c:15:66:
                    b6:ee:50:37:3f:8e:6c:e8:9a:1d:de:64:8a:e5:68:
                    9d:5a:fb:10:84:3d:d1:de:10:e2:56:bc:df:5a:1b:
                    93:80:34:78:e9:77:5c:04:fe:64:88:1a:f0:ec:06:
                    4a:ce:fc:97:19:2a:af:e1:19:96:1a:68:d0:7c:78:
                    c3:5d:a5:b2:db:34:95:84:70:62:50:e7:8b:13:f6:
                    10:74:8f:22:8f:97:36:0e:43:12:82:66:ad:3b:cd:
                    e2:83:6a:50:a0:11:63:7f:1a:92:78:12:77:95:86:
                    93:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Cert Type: 
                SSL Client, SSL Server
            Netscape Comment: 
                OpenSSL Generated Server Certificate
            X509v3 Subject Key Identifier: 
                BC:7E:AC:62:6E:EA:F7:C5:59:C5:01:B4:4F:45:72:0A:5D:D9:8F:DB
            X509v3 Authority Key Identifier: 
                keyid:81:F7:99:5B:10:B9:C8:8C:DE:F3:52:5E:EA:4E:69:A0:43:3E:AC:DD
                DirName:/OU=OSAAF/O=ONAP/C=US
                serial:07

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:aaf.osaaf.org, DNS:aaf.osaaf.org, DNS:service.aaf.osaaf.org, DNS:locate.aaf.osaaf.org, DNS:oauth.aaf.osaaf.org, DNS:token.aaf.osaaf.org, DNS:introspect.aaf.osaaf.org, DNS:gui.aaf.osaaf.org, DNS:cm.aaf.osaaf.org, DNS:hello.aaf.osaaf.org, DNS:aaf-service, DNS:aaf-service.onap, DNS:aaf-locate, DNS:aaf-locate.onap, DNS:aaf-oauth, DNS:aaf-oauth.onap, DNS:aaf-token, DNS:aaf-token.onap, DNS:aaf-introspect, DNS:aaf-introspect.onap, DNS:aaf-gui, DNS:aaf-gui.onap, DNS:aaf-cm, DNS:aaf-cm.onap, DNS:aaf-hello, DNS:aaf-hello.onap
    Signature Algorithm: sha256WithRSAEncryption
         92:e7:bf:42:34:03:09:10:44:90:02:49:f9:6b:db:fb:62:ab:
         7e:e7:65:df:58:a9:ba:ff:52:65:43:ed:78:46:a8:be:52:e7:
         1f:10:ae:5e:0c:2c:ff:a6:b6:41:bd:dc:2d:d0:2e:26:04:c3:
         d7:c4:41:6c:69:92:9c:7c:ca:1e:64:d7:fa:44:05:6b:38:80:
         cf:0e:23:67:62:78:24:cd:07:e4:23:49:b0:14:6e:54:4a:e5:
         55:5f:5e:21:60:2e:04:2c:49:41:a3:e6:59:96:95:7a:86:b9:
         2f:e0:3d:dc:96:28:c7:77:63:dd:1d:a4:71:83:70:a2:76:a7:
         a0:6a:e5:57:9f:da:5b:8f:c7:49:40:58:91:e7:4d:ed:32:3c:
         3f:3a:7f:c6:b0:ff:61:21:a4:e3:a7:a5:71:dc:99:ea:ce:2c:
         77:56:d5:4a:c7:cd:70:9c:56:16:21:60:4d:d5:e2:a0:29:b6:
         6c:4e:6f:75:9b:db:ad:79:33:00:8d:88:d9:8f:f5:c1:82:12:
         cd:9b:51:f1:13:8c:c3:0d:2b:47:f5:bb:57:1a:5e:0c:8e:03:
         7b:58:82:aa:2f:e5:a2:3c:30:f0:d4:5a:a6:80:b2:b7:76:fd:
         58:c8:46:10:38:83:1c:56:59:8a:38:c3:bd:89:ff:c1:e6:21:
         ef:fe:82:eb
-----BEGIN CERTIFICATE-----

VlmKOMO9if/B5iHv/oLr
-----END CERTIFICATE-----
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96139972664 (0x1662639038)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=ONAP, OU=OSAAF, CN=intermediateCA_9
        Validity
            Not Before: Sep  8 12:10:44 2022 GMT
            Not After : Sep  8 12:10:44 2023 GMT
        Subject: C=US, O=ONAP, OU=aaf@aaf.osaaf.org, OU=OSAAF, CN=aaf.osaaf.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8b:d4:44:c2:f4:93:62:87:7d:92:2e:b4:f2:
                    38:c5:ec:bc:eb:44:ba:33:34:58:84:5c:24:9a:2b:
                    07:0d:9a:5d:52:83:cc:e9:d2:96:e6:b9:e9:fd:43:
                    be:2b:b0:e5:09:e4:8f:ec:fb:03:01:00:52:ce:86:
                    d3:47:e8:36:c0:2d:a8:7e:f3:0b:eb:cd:08:be:d9:
                    b3:fb:bb:9a:1e:0e:47:94:b0:43:a4:3c:e2:b3:e7:
                    95:0a:7a:32:29:a0:8f:fb:b9:1e:b7:0e:1c:da:7e:
                    45:30:02:75:07:f9:67:90:c1:af:1f:67:97:3a:45:
                    11:96:e9:8c:2b:06:fd:a6:64:ca:0f:68:61:29:35:
                    af:02:5e:7b:69:c5:f4:6f:f2:7d:46:6b:0c:15:66:
                    b6:ee:50:37:3f:8e:6c:e8:9a:1d:de:64:8a:e5:68:
                    9d:5a:fb:10:84:3d:d1:de:10:e2:56:bc:df:5a:1b:
                    93:80:34:78:e9:77:5c:04:fe:64:88:1a:f0:ec:06:
                    4a:ce:fc:97:19:2a:af:e1:19:96:1a:68:d0:7c:78:
                    c3:5d:a5:b2:db:34:95:84:70:62:50:e7:8b:13:f6:
                    10:74:8f:22:8f:97:36:0e:43:12:82:66:ad:3b:cd:
                    e2:83:6a:50:a0:11:63:7f:1a:92:78:12:77:95:86:
                    93:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Cert Type: 
                SSL Client, SSL Server
            Netscape Comment: 
                OpenSSL Generated Server Certificate
            X509v3 Subject Key Identifier: 
                BC:7E:AC:62:6E:EA:F7:C5:59:C5:01:B4:4F:45:72:0A:5D:D9:8F:DB
            X509v3 Authority Key Identifier: 
                keyid:81:F7:99:5B:10:B9:C8:8C:DE:F3:52:5E:EA:4E:69:A0:43:3E:AC:DD
                DirName:/OU=OSAAF/O=ONAP/C=US
                serial:07

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:aaf.osaaf.org, DNS:aaf.osaaf.org, DNS:service.aaf.osaaf.org, DNS:locate.aaf.osaaf.org, DNS:oauth.aaf.osaaf.org, DNS:token.aaf.osaaf.org, DNS:introspect.aaf.osaaf.org, DNS:gui.aaf.osaaf.org, DNS:cm.aaf.osaaf.org, DNS:hello.aaf.osaaf.org, DNS:aaf-service, DNS:aaf-service.onap, DNS:aaf-locate, DNS:aaf-locate.onap, DNS:aaf-oauth, DNS:aaf-oauth.onap, DNS:aaf-token, DNS:aaf-token.onap, DNS:aaf-introspect, DNS:aaf-introspect.onap, DNS:aaf-gui, DNS:aaf-gui.onap, DNS:aaf-cm, DNS:aaf-cm.onap, DNS:aaf-hello, DNS:aaf-hello.onap
    Signature Algorithm: sha256WithRSAEncryption
         92:e7:bf:42:34:03:09:10:44:90:02:49:f9:6b:db:fb:62:ab:
         7e:e7:65:df:58:a9:ba:ff:52:65:43:ed:78:46:a8:be:52:e7:
         1f:10:ae:5e:0c:2c:ff:a6:b6:41:bd:dc:2d:d0:2e:26:04:c3:
         d7:c4:41:6c:69:92:9c:7c:ca:1e:64:d7:fa:44:05:6b:38:80:
         cf:0e:23:67:62:78:24:cd:07:e4:23:49:b0:14:6e:54:4a:e5:
         55:5f:5e:21:60:2e:04:2c:49:41:a3:e6:59:96:95:7a:86:b9:
         2f:e0:3d:dc:96:28:c7:77:63:dd:1d:a4:71:83:70:a2:76:a7:
         a0:6a:e5:57:9f:da:5b:8f:c7:49:40:58:91:e7:4d:ed:32:3c:
         3f:3a:7f:c6:b0:ff:61:21:a4:e3:a7:a5:71:dc:99:ea:ce:2c:
         77:56:d5:4a:c7:cd:70:9c:56:16:21:60:4d:d5:e2:a0:29:b6:
         6c:4e:6f:75:9b:db:ad:79:33:00:8d:88:d9:8f:f5:c1:82:12:
         cd:9b:51:f1:13:8c:c3:0d:2b:47:f5:bb:57:1a:5e:0c:8e:03:
         7b:58:82:aa:2f:e5:a2:3c:30:f0:d4:5a:a6:80:b2:b7:76:fd:
         58:c8:46:10:38:83:1c:56:59:8a:38:c3:bd:89:ff:c1:e6:21:
         ef:fe:82:eb
-----BEGIN CERTIFICATE-----

VlmKOMO9if/B5iHv/oLr
-----END CERTIFICATE-----
Bag Attributes
    localKeyID: 02 89 19 5C 56 C9 C0 E1 F7 27 DE 36 00 72 F6 9F 85 ED 78 FA 
    friendlyName: aaf_intermediate_9
subject=C = US, O = ONAP, OU = OSAAF, CN = intermediateCA_9

issuer=OU = OSAAF, O = ONAP, C = US

-----BEGIN CERTIFICATE-----

BmMXTvouW+Flyvcw/0oTcfN0biDIt0mCkZ5CQVjfGL9DTOYteR5hw+k=
-----END CERTIFICATE-----
Generated ONAP Test AAF certs
aaf_locator_container=oom
aaf_release=Frankfurt
aaf_locator_container_ns=onap
aaf_locator_name=%NS.%N
aaf_locate_url=https://aaf-locate.onap:8095
cadi_longitude=-72.0
cadi_latitude=38.0
aaf_locator_public_fqdn=aaf.osaaf.org
cadi_x509_issuers=CN=intermediateCA_1,
aaf_env=DEV
aaf_locator_name.oom=%CNS.%NS.%N
2022-09-08T12:10:55.458+0000 INIT [cadi] https.protocols set by cadi_protocols in CADI Properties
2022-09-08T12:10:55.461+0000 INIT [cadi] jdk.tls.client.protocols set from Default Protocols
Writing to /opt/app/osaaf/local
Writing file /opt/app/osaaf/local/org.osaaf.aaf.keyfile
2022-09-08T12:11:12.753+0000 INIT [cadi] RegistrationProperty: default_container='oom'
2022-09-08T12:11:12.753+0000 INIT [cadi] RegistrationProperty: public_port='null'
2022-09-08T12:11:12.965+0000 INIT [cadi] RegistrationProperty: hostname='onap-aaf-gui-c4676b95c-fc4pn'
2022-09-08T12:11:12.966+0000 INIT [cadi] RegistrationProperty: public_fqdn='aaf.osaaf.org'
2022-09-08T12:11:12.967+0000 INIT [cadi] RegistrationProperty: default_name='%NS.%N'
2022-09-08T12:11:12.967+0000 INIT [cadi] RegistrationProperty: latitude='38.0'
2022-09-08T12:11:12.967+0000 INIT [cadi] RegistrationProperty: longitude='-72.0'
2022-09-08T12:11:12.968+0000 INIT [cadi] RegistrationProperty: public_hostname(overloaded by )='aaf.osaaf.org'
2022-09-08T12:11:12.969+0000 INIT [cadi] RegistrationProperty: default_fqdn='onap-aaf-gui-c4676b95c-fc4pn'
2022-09-08T12:11:12.969+0000 INIT [cadi] RegistrationProperty: default_container_ns='onap'
Passed in Truststore is /opt/app/osaaf/public/truststoreONAPall.jks
New Truststore is /opt/app/osaaf/local/truststoreONAPall.jks
Reading /tmp/tmp.aEgdgE
Reading /opt/app/aaf_config/local/aaf.props
Reading /opt/app/aaf_config/local/initialConfig.props
Creating new /opt/app/osaaf/local/org.osaaf.aaf.location.props
Creating new /opt/app/osaaf/local/org.osaaf.aaf.cred.props
Creating new /opt/app/osaaf/local/org.osaaf.aaf.props
2022-09-08T12:11:21.264+0000: Trans Info
         REMOTE Get Configuration 9098.8125ms
 
Created AAF Initial Configurations
Initialization Complete
