Page Comparison

$ ls $JAVA_HOME/jre/lib/security/cacerts

/Library/Java/JavaVirtualMachines/jdk1.8.0_121.jdk/Contents/Home/jre/lib/security/cacerts

sudo keytool -import -trustcacerts -alias aai -file /config/certs/aai/aaiapisimpledemoopenecomporg.cer -keystore $JAVA_HOME/jre/lib/security/cacerts

on robot

root@vm1-robot:~# keytool -list -keystore /usr/lib/jvm/java-1.8.0-openjdk-amd64/jre/lib/security/cacerts -v

sudo scp aaiapisimpledemoopenecomporg.cer root@robot:/opt

keytool -import -trustcacerts -alias aai -file aaiapisimpledemoopenecomporg.cer -keystore  /usr/lib/jvm/java-1.8.0-openjdk-amd64/jre/lib/security/cacerts 

the aai keystore password does not work - I will use my own truststore

"AAI_KEYSTORE_PASSWD_X": "OBF:1vn21ugu1saj1v9i1v941sar1ugw1vo0"

root@vm1-robot:/opt# keytool -import -trustcacerts -alias aai -file aaiapisimpledemoopenecomporg.cer -keystore  /usr/lib/jvm/java-1.8.0-openjdk-amd64/jre/lib/security/cacerts

Enter keystore password:  

// use our own

keytool error: java.io.IOException: Keystore was tampered with, or password was incorrect

root@vm1-robot:/opt# keytool -genkey -alias onap -keyalg RSA -keystore KeyStore.jks -keysize 2048

Enter keystore password:  

Is CN=Michael OBrien, OU=onap, O=onap, L=Unknown, ST=Unknown, C=Unknown correct?

Enter key password for <onap>

(RETURN if same as keystore password):  

Re-enter new password: 

// import cer

root@vm1-robot:/opt# keytool -import -trustcacerts -alias aai -file aaiapisimpledemoopenecomporg.cer -keystore  KeyStore.jks 

Enter keystore password:  

Owner: EMAILADDRESS=aai-host@api.simpledemo.openecomp.org, CN=aai.api.simpledemo.openecomp.org, OU=SimpleDemo, O=OpenECOMP, L=Bedminster, ST=NJ, C=US

Issuer: EMAILADDRESS=simpledemo@openecomp.org, CN=OpenECOMP simpledemo Server CA X1, OU=simpledemo, O=OpenECOMP, L=Bedminster, ST=NJ, C=US

Serial number: 83ca7c32dc9f7329

Valid from: Wed Nov 30 15:38:39 UTC 2016 until: Thu Nov 30 15:38:39 UTC 2017

Trust this certificate? [no]:  yes

Certificate was added to keystore

// require: cert, username, password, headers(X-FromAppId,Accept), Authenticator

public String run(boolean isSSL, String url, String port, String path) {

  String record = null;
  Client client = null;
  WebTarget latestTarget = null;
  WebTarget rootTarget = null;
  if(isSSL) {
    // Use only for default JDK keystore

    // SslConfigurator sslConfig = SslConfigurator.newInstance();

SslConfigurator sslConfig =SslConfigurator.newInstance()

.trustStoreFile("/opt/KeyStore.jks")

.trustStorePassword("changeme")//"changeit")

.keyStoreFile("/opt/KeyStore.jks")

.keyPassword("changeme");//"changeit");

    SSLContext sslContext = sslConfig.createSSLContext();
    HostnameVerifier verifier = new HostnameVerifier() {
    public boolean verify(String hostname, SSLSession sslSession) {
      return true; // TODO: security breach
    }};
    client = ClientBuilder.newBuilder().sslContext(sslContext).hostnameVerifier(verifier).build();
    client.register(new Authenticator("AAI","AAI"));
  } else {

      client = ClientBuilder.newClient();
    }
    rootTarget = client.target(url);
    latestTarget = rootTarget.path(path);
    try {
      try { Thread.sleep(1); } catch (InterruptedException ie) { Thread.currentThread().interrupt(); }
        record = finalTarget.request()
          .header("X-FromAppId", "AAI").header("Accept", "application/json")
          .get(String.class);

public class Authenticator implements ClientRequestFilter {
 private final String user;
 private final String pass;

 public Authenticator(String user, String password) {
      this.user = user; this.pass = password;
 }

 public void filter(ClientRequestContext requestContext) throws IOException {
   MultivaluedMap<String, Object> headMap = requestContext.getHeaders();
 String basicAuth = null;
 try {
         String aToken = user + ":" + pass;
 basicAuth = "BASIC " + DatatypeConverter.printBase64Binary(aToken.getBytes("UTF-8"));
 } catch (UnsupportedEncodingException uee) { throw new IllegalStateException("Encoding with UTF-8 failed", uee);}
   headMap.add("Authorization", basicAuth);
 }
}

pom.xml 

  <parent><groupId>org.springframework.boot</groupId><artifactId>spring-boot-starter-parent</artifactId><version>1.5.3.RELEASE</version></parent>

    <dependencies>
<dependency><groupId>org.springframework.boot</groupId><artifactId>spring-boot-starter-web</artifactId></dependency>       

        <!-- avoid restarts --><dependency><groupId>org.springframework.boot</groupId><artifactId>spring-boot-devtools</artifactId><optional>true</optional></dependency>

        <dependency><groupId>org.springframework.boot</groupId><artifactId>spring-boot-starter-actuator</artifactId></dependency>
<dependency><groupId>org.springframework.boot</groupId><artifactId>spring-boot-starter-test</artifactId><scope>test</scope></dependency>
    </dependencies>

    <build><plugins><plugin><groupId>org.springframework.boot</groupId><artifactId>spring-boot-maven-plugin</artifactId>
                <!-- may not be required --><configuration><addResources>true</addResources> </configuration></plugin></plugins></build>

                    scene.getObjectByName(arrowToFlash).line.material.color.set(flashOnColor);

                    scene.getObjectByName(arrowToFlash).cone.material.color.set(flashOnColor);

                    aDmaap.material.color.set(flashOnColor);

                    aFirewall.material.color.set(flashOnColor);

            var vmFromNames = ["generator", "firewall", "service-firewall", "firewall", "appc",      "policy","policy"];

            var vmToNames =   ["firewall",  "sink",     "firewall",         "dmaap",    "generator", "dmaap", "appc"];

            var edgeColors = [  colorRed,    colorRed,   colorGreen,          colorRed,   colorRed,    colorBlue, colorBlue];

            for(var vm=0; vm<vmFromNames.length; vm++) {

            threejsFlashStates[vmNames[vm]] = 0;

                var startObject = scene.getObjectByName(vmFromNames[vm]);

                var endObject = scene.getObjectByName(vmToNames[vm]);

                var startPoint = new THREE.Vector3(startObject.position.x, startObject.position.y, startObject.position.z);

                var endPoint   = new THREE.Vector3(endObject.position.x, endObject.position.y, endObject.position.z);

                var direction = new THREE.Vector3().subVectors(endPoint, startPoint).normalize();

                var arrow = new THREE.ArrowHelper(direction, startPoint, startPoint.distanceTo(endPoint), edgeColors[vm] );

                arrow.line.material.linewidth = 4; // no effect on windows

                var vName = "edge-" + vmFromNames[vm] + "-" + vmToNames[vm];

                console.log(vName);

                arrow.name = vName;

                group.add(arrow);

            }

        function getCustomer() {

            $.ajax({url: "/api",

            data: { action: 'customer-read' },

            success: function( data ) {

               var returnedData = JSON.parse(data.content);

               console.log(returnedData);

               document.getElementById('config-customer-value').bgColor='#c0ff30'

               $( "#config-customer-value" ).html( "<strong>" + returnedData['global-customer-id'] + "</strong>" );

            }}); }

@Controller @RequestMapping("/api")

publicclassApiController{

    @RequestMapping(method=RequestMethod.GET)

    public@ResponseBodyApiprocess(@RequestParam(value="action",required=true,defaultValue="undefined")String action){  

content = client.run(true,Configuration.get(Configuration.DC,"aai-ip"),"8443","aai/v8/business/customers/customer","AAI","AAI","AAI");

record = rootTarget.request()

.header("X-FromAppId", appId).header("Accept","application/json")

.get(String.class);

http://{{policy_ip}}:6969/healthcheck

Content-Type:application/json
//ClientAuth:cHl0aG9uOnRlc3Q=
////User-Agent:libcurl-agent/1.0
Authorization:Basic aGVhbHRoY2hlY2s6emIhWHp0RzM0