# Properties passed in
HOSTNAME=onap-aaf-service-9c646567d-bb9rr
aaf_locator_container=oom
aaf_release=Frankfurt
aaf_locator_container_ns=onap
aaf_locator_name=%NS.%N
aaf_locate_url=https://aaf-locate.onap:8095
cadi_longitude=-72.0
cadi_latitude=38.0
aaf_locator_public_fqdn=aaf.osaaf.org
cadi_x509_issuers=CN=intermediateCA_1,
aaf_env=DEV
aaf_locator_name.oom=%CNS.%NS.%N
Set Identities
Clean up directory /opt/app/osaaf/local
ls: /opt/app/osaaf/local: No such file or directory
bin/agent.sh: line 90: /opt/app/osaaf/local/VERSION: No such file or directory
Decode
Setup ONAP Test CAs and Signers
Bootstrap Creation of Keystore from Signer
Bootstrap AAF Certificate
bootstrap.sh: line 89: [: aaf.osaaf.org: integer expression expected
Generating a RSA private key
.+++++
.....+++++
writing new private key to '/tmp/aaf.bootstrap.key'
-----
Sign it
Using configuration from openssl.conf
Check that the request matches the signature
Signature ok
Certificate Details:
        Serial Number: 96139969911 (0x1662638577)
        Validity
            Not Before: Sep  8 12:02:58 2022 GMT
            Not After : Sep  8 12:02:58 2023 GMT
        Subject:
            countryName               = US
            organizationName          = ONAP
            organizationalUnitName    = aaf@aaf.osaaf.org
            organizationalUnitName    = OSAAF
            commonName                = aaf.osaaf.org
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Cert Type: 
                SSL Client, SSL Server
            Netscape Comment: 
                OpenSSL Generated Server Certificate
            X509v3 Subject Key Identifier: 
                E7:AF:C0:18:C0:D9:CD:4D:A6:AD:57:DB:0B:E8:B2:8A:0E:CC:32:AF
            X509v3 Authority Key Identifier: 
                keyid:81:F7:99:5B:10:B9:C8:8C:DE:F3:52:5E:EA:4E:69:A0:43:3E:AC:DD
                DirName:/OU=OSAAF/O=ONAP/C=US
                serial:07

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:aaf.osaaf.org, DNS:aaf.osaaf.org, DNS:service.aaf.osaaf.org, DNS:locate.aaf.osaaf.org, DNS:oauth.aaf.osaaf.org, DNS:token.aaf.osaaf.org, DNS:introspect.aaf.osaaf.org, DNS:gui.aaf.osaaf.org, DNS:cm.aaf.osaaf.org, DNS:hello.aaf.osaaf.org, DNS:aaf-service, DNS:aaf-service.onap, DNS:aaf-locate, DNS:aaf-locate.onap, DNS:aaf-oauth, DNS:aaf-oauth.onap, DNS:aaf-token, DNS:aaf-token.onap, DNS:aaf-introspect, DNS:aaf-introspect.onap, DNS:aaf-gui, DNS:aaf-gui.onap, DNS:aaf-cm, DNS:aaf-cm.onap, DNS:aaf-hello, DNS:aaf-hello.onap
Certificate is to be certified until Sep  8 12:02:58 2023 GMT (365 days)

Write out database with 1 new entries
Data Base Updated
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96139969911 (0x1662638577)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=ONAP, OU=OSAAF, CN=intermediateCA_9
        Validity
            Not Before: Sep  8 12:02:58 2022 GMT
            Not After : Sep  8 12:02:58 2023 GMT
        Subject: C=US, O=ONAP, OU=aaf@aaf.osaaf.org, OU=OSAAF, CN=aaf.osaaf.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:13:0a:f9:bb:7d:c2:27:f2:18:66:e2:df:
                    e9:b8:e9:2c:15:ea:81:0e:3a:7a:e2:84:0a:80:db:
                    0d:74:27:31:55:62:a8:06:b7:8f:03:cd:f5:08:5b:
                    97:5d:2b:3b:aa:9d:78:9b:61:67:f5:bc:34:24:b4:
                    20:fe:33:90:25:63:cf:18:07:59:a4:02:75:23:57:
                    76:4a:54:bd:a2:a4:be:94:ac:9b:d7:98:33:29:97:
                    11:f8:f6:d4:b3:a6:d9:34:98:ac:3d:0d:bd:c3:98:
                    af:e4:03:0e:c9:1e:0e:6e:c1:30:a6:7d:8d:ce:28:
                    8a:95:22:e2:08:1a:56:c9:01:c2:aa:ec:e7:c5:cf:
                    2c:62:85:16:03:2a:df:b7:83:8d:dc:f7:01:fb:5b:
                    3b:fc:98:ef:02:58:c5:a1:72:b3:b0:72:0c:99:8d:
                    ad:28:1d:be:a3:a0:92:62:1d:12:4e:b6:5b:ee:00:
                    01:f0:20:f4:8a:44:e7:e9:85:93:3b:fc:64:4f:b7:
                    be:46:3a:f1:85:bf:fd:e5:a3:75:f1:7e:e6:77:59:
                    ff:e0:28:59:32:00:48:ac:21:b1:d9:96:fe:4b:03:
                    d4:cc:42:f4:af:eb:10:41:82:b9:3a:86:f7:30:15:
                    7e:79:76:3c:da:b2:6c:c5:f0:74:87:d9:9f:52:3c:
                    cb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Cert Type: 
                SSL Client, SSL Server
            Netscape Comment: 
                OpenSSL Generated Server Certificate
            X509v3 Subject Key Identifier: 
                E7:AF:C0:18:C0:D9:CD:4D:A6:AD:57:DB:0B:E8:B2:8A:0E:CC:32:AF
            X509v3 Authority Key Identifier: 
                keyid:81:F7:99:5B:10:B9:C8:8C:DE:F3:52:5E:EA:4E:69:A0:43:3E:AC:DD
                DirName:/OU=OSAAF/O=ONAP/C=US
                serial:07

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:aaf.osaaf.org, DNS:aaf.osaaf.org, DNS:service.aaf.osaaf.org, DNS:locate.aaf.osaaf.org, DNS:oauth.aaf.osaaf.org, DNS:token.aaf.osaaf.org, DNS:introspect.aaf.osaaf.org, DNS:gui.aaf.osaaf.org, DNS:cm.aaf.osaaf.org, DNS:hello.aaf.osaaf.org, DNS:aaf-service, DNS:aaf-service.onap, DNS:aaf-locate, DNS:aaf-locate.onap, DNS:aaf-oauth, DNS:aaf-oauth.onap, DNS:aaf-token, DNS:aaf-token.onap, DNS:aaf-introspect, DNS:aaf-introspect.onap, DNS:aaf-gui, DNS:aaf-gui.onap, DNS:aaf-cm, DNS:aaf-cm.onap, DNS:aaf-hello, DNS:aaf-hello.onap
    Signature Algorithm: sha256WithRSAEncryption
         7f:b1:bf:7a:ae:d4:a3:32:2e:c3:6c:df:ba:5b:97:23:9a:b0:
         6e:c0:4a:1b:65:9f:65:ad:07:b9:0c:fb:0e:ee:10:68:88:b5:
         93:66:63:56:34:da:dc:a2:14:cd:7c:00:ad:97:42:0e:49:41:
         99:24:3c:14:64:a1:fc:1a:1a:3f:a4:8d:c0:26:cc:54:a1:e3:
         37:9f:21:38:40:dd:97:e8:a4:32:3c:8d:60:69:9e:7b:3b:3d:
         2a:c2:46:49:8c:6c:1f:d9:1e:a4:3c:fc:8d:dc:ce:6b:0b:63:
         6a:2d:aa:5a:13:d9:3a:9c:73:5b:52:e7:3a:60:79:fb:da:d1:
         c3:ac:99:61:4e:46:6f:8e:32:4a:06:c7:ee:b2:7a:c8:22:2b:
         47:73:42:a6:8c:4e:96:c1:4e:51:e0:57:1b:3f:be:91:35:25:
         84:fe:0f:31:87:9c:63:84:4e:f5:e0:5c:b1:99:dc:03:d4:7d:
         d0:a2:de:eb:3b:ec:69:27:6c:c8:91:f1:8e:0b:01:73:50:03:
         c9:b2:83:a2:4b:8c:9d:34:92:2d:19:1e:b5:99:dd:3d:2e:32:
         10:80:e7:9b:0c:58:72:f7:2f:99:ab:6f:d8:e4:97:43:e1:61:
         37:b7:af:1c:bf:42:d9:46:f3:ff:7a:0a:fd:9c:89:8a:9e:b9:
         68:e6:95:12
-----BEGIN CERTIFICATE-----

RvP/egr9nImKnrlo5pUS
-----END CERTIFICATE-----
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96139969911 (0x1662638577)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=ONAP, OU=OSAAF, CN=intermediateCA_9
        Validity
            Not Before: Sep  8 12:02:58 2022 GMT
            Not After : Sep  8 12:02:58 2023 GMT
        Subject: C=US, O=ONAP, OU=aaf@aaf.osaaf.org, OU=OSAAF, CN=aaf.osaaf.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:13:0a:f9:bb:7d:c2:27:f2:18:66:e2:df:
                    e9:b8:e9:2c:15:ea:81:0e:3a:7a:e2:84:0a:80:db:
                    0d:74:27:31:55:62:a8:06:b7:8f:03:cd:f5:08:5b:
                    97:5d:2b:3b:aa:9d:78:9b:61:67:f5:bc:34:24:b4:
                    20:fe:33:90:25:63:cf:18:07:59:a4:02:75:23:57:
                    76:4a:54:bd:a2:a4:be:94:ac:9b:d7:98:33:29:97:
                    11:f8:f6:d4:b3:a6:d9:34:98:ac:3d:0d:bd:c3:98:
                    af:e4:03:0e:c9:1e:0e:6e:c1:30:a6:7d:8d:ce:28:
                    8a:95:22:e2:08:1a:56:c9:01:c2:aa:ec:e7:c5:cf:
                    2c:62:85:16:03:2a:df:b7:83:8d:dc:f7:01:fb:5b:
                    3b:fc:98:ef:02:58:c5:a1:72:b3:b0:72:0c:99:8d:
                    ad:28:1d:be:a3:a0:92:62:1d:12:4e:b6:5b:ee:00:
                    01:f0:20:f4:8a:44:e7:e9:85:93:3b:fc:64:4f:b7:
                    be:46:3a:f1:85:bf:fd:e5:a3:75:f1:7e:e6:77:59:
                    ff:e0:28:59:32:00:48:ac:21:b1:d9:96:fe:4b:03:
                    d4:cc:42:f4:af:eb:10:41:82:b9:3a:86:f7:30:15:
                    7e:79:76:3c:da:b2:6c:c5:f0:74:87:d9:9f:52:3c:
                    cb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Cert Type: 
                SSL Client, SSL Server
            Netscape Comment: 
                OpenSSL Generated Server Certificate
            X509v3 Subject Key Identifier: 
                E7:AF:C0:18:C0:D9:CD:4D:A6:AD:57:DB:0B:E8:B2:8A:0E:CC:32:AF
            X509v3 Authority Key Identifier: 
                keyid:81:F7:99:5B:10:B9:C8:8C:DE:F3:52:5E:EA:4E:69:A0:43:3E:AC:DD
                DirName:/OU=OSAAF/O=ONAP/C=US
                serial:07

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:aaf.osaaf.org, DNS:aaf.osaaf.org, DNS:service.aaf.osaaf.org, DNS:locate.aaf.osaaf.org, DNS:oauth.aaf.osaaf.org, DNS:token.aaf.osaaf.org, DNS:introspect.aaf.osaaf.org, DNS:gui.aaf.osaaf.org, DNS:cm.aaf.osaaf.org, DNS:hello.aaf.osaaf.org, DNS:aaf-service, DNS:aaf-service.onap, DNS:aaf-locate, DNS:aaf-locate.onap, DNS:aaf-oauth, DNS:aaf-oauth.onap, DNS:aaf-token, DNS:aaf-token.onap, DNS:aaf-introspect, DNS:aaf-introspect.onap, DNS:aaf-gui, DNS:aaf-gui.onap, DNS:aaf-cm, DNS:aaf-cm.onap, DNS:aaf-hello, DNS:aaf-hello.onap
    Signature Algorithm: sha256WithRSAEncryption
         7f:b1:bf:7a:ae:d4:a3:32:2e:c3:6c:df:ba:5b:97:23:9a:b0:
         6e:c0:4a:1b:65:9f:65:ad:07:b9:0c:fb:0e:ee:10:68:88:b5:
         93:66:63:56:34:da:dc:a2:14:cd:7c:00:ad:97:42:0e:49:41:
         99:24:3c:14:64:a1:fc:1a:1a:3f:a4:8d:c0:26:cc:54:a1:e3:
         37:9f:21:38:40:dd:97:e8:a4:32:3c:8d:60:69:9e:7b:3b:3d:
         2a:c2:46:49:8c:6c:1f:d9:1e:a4:3c:fc:8d:dc:ce:6b:0b:63:
         6a:2d:aa:5a:13:d9:3a:9c:73:5b:52:e7:3a:60:79:fb:da:d1:
         c3:ac:99:61:4e:46:6f:8e:32:4a:06:c7:ee:b2:7a:c8:22:2b:
         47:73:42:a6:8c:4e:96:c1:4e:51:e0:57:1b:3f:be:91:35:25:
         84:fe:0f:31:87:9c:63:84:4e:f5:e0:5c:b1:99:dc:03:d4:7d:
         d0:a2:de:eb:3b:ec:69:27:6c:c8:91:f1:8e:0b:01:73:50:03:
         c9:b2:83:a2:4b:8c:9d:34:92:2d:19:1e:b5:99:dd:3d:2e:32:
         10:80:e7:9b:0c:58:72:f7:2f:99:ab:6f:d8:e4:97:43:e1:61:
         37:b7:af:1c:bf:42:d9:46:f3:ff:7a:0a:fd:9c:89:8a:9e:b9:
         68:e6:95:12
-----BEGIN CERTIFICATE-----

RvP/egr9nImKnrlo5pUS
-----END CERTIFICATE-----
Bag Attributes
    localKeyID: 02 89 19 5C 56 C9 C0 E1 F7 27 DE 36 00 72 F6 9F 85 ED 78 FA 
    friendlyName: aaf_intermediate_9
subject=C = US, O = ONAP, OU = OSAAF, CN = intermediateCA_9

issuer=OU = OSAAF, O = ONAP, C = US

-----BEGIN CERTIFICATE-----

BmMXTvouW+Flyvcw/0oTcfN0biDIt0mCkZ5CQVjfGL9DTOYteR5hw+k=
-----END CERTIFICATE-----
Generated ONAP Test AAF certs
aaf_locator_container=oom
aaf_release=Frankfurt
aaf_locator_container_ns=onap
aaf_locator_name=%NS.%N
aaf_locate_url=https://aaf-locate.onap:8095
cadi_longitude=-72.0
cadi_latitude=38.0
aaf_locator_public_fqdn=aaf.osaaf.org
cadi_x509_issuers=CN=intermediateCA_1,
aaf_env=DEV
aaf_locator_name.oom=%CNS.%NS.%N
2022-09-08T12:03:05.210+0000 INIT [cadi] https.protocols set by cadi_protocols in CADI Properties
2022-09-08T12:03:05.301+0000 INIT [cadi] jdk.tls.client.protocols set from Default Protocols
Writing to /opt/app/osaaf/local
Writing file /opt/app/osaaf/local/org.osaaf.aaf.keyfile
2022-09-08T12:03:16.501+0000 INIT [cadi] RegistrationProperty: default_container='oom'
2022-09-08T12:03:16.502+0000 INIT [cadi] RegistrationProperty: public_port='null'
2022-09-08T12:03:16.605+0000 INIT [cadi] RegistrationProperty: hostname='onap-aaf-service-9c646567d-bb9rr'
2022-09-08T12:03:16.606+0000 INIT [cadi] RegistrationProperty: public_fqdn='aaf.osaaf.org'
2022-09-08T12:03:16.606+0000 INIT [cadi] RegistrationProperty: default_name='%NS.%N'
2022-09-08T12:03:16.607+0000 INIT [cadi] RegistrationProperty: latitude='38.0'
2022-09-08T12:03:16.607+0000 INIT [cadi] RegistrationProperty: longitude='-72.0'
2022-09-08T12:03:16.608+0000 INIT [cadi] RegistrationProperty: public_hostname(overloaded by )='aaf.osaaf.org'
2022-09-08T12:03:16.608+0000 INIT [cadi] RegistrationProperty: default_fqdn='onap-aaf-service-9c646567d-bb9rr'
2022-09-08T12:03:16.609+0000 INIT [cadi] RegistrationProperty: default_container_ns='onap'
Passed in Truststore is /opt/app/osaaf/public/truststoreONAPall.jks
New Truststore is /opt/app/osaaf/local/truststoreONAPall.jks
Reading /tmp/tmp.lFKdnJ
Reading /opt/app/aaf_config/local/aaf.props
Reading /opt/app/aaf_config/local/initialConfig.props
Creating new /opt/app/osaaf/local/org.osaaf.aaf.location.props
Creating new /opt/app/osaaf/local/org.osaaf.aaf.cred.props
Creating new /opt/app/osaaf/local/org.osaaf.aaf.props
2022-09-08T12:03:21.011+0000: Trans Info
         REMOTE Get Configuration 4704.256ms
 
Created AAF Initial Configurations
Initialization Complete
