...
If AAF stops working, e.g. AAI returns authorization error, bounce AAF aaf-locate and aaf-service containers.
Check SSL certificate expiration (script from Brian). Run from Robot pod
| Code Block | ||||
|---|---|---|---|---|
| ||||
for server in aaf-service.onap:8100 aai.onap:8443 vid.onap:8443 portal-app.onap:8443 sdc-fe.onap:9443 sdc-be.onap:8443 clamp.onap:8443 pap.onap:8443 ;
do
host=$(echo $server | cut -d ":" -f 1)
echo | openssl s_client -showcerts -servername $host -connect $server 2>/dev/null | openssl x509 -inform pem -noout -text | grep -E "Not After|Not Before|Issuer:|Subject:"
done
Issuer: C = US, O = ONAP, OU = OSAAF, CN = intermediateCA_9
Not Before: Mar 6 14:46:53 2019 GMT
Not After : Mar 5 14:46:53 2020 GMT
Subject: C = US, O = ONAP, OU = aaf@aaf.osaaf.org, OU = OSAAF, CN = aaf.onap
|