Skip to content

Commit 85edb3a

Browse files
committed
- nginx added for common interface
- update the reg <-> reg... reference - injected rootCA into each component so that they can accept self-signed cert - Added CADC's example image version script (if needed in future) will parse response from harbor (see details.md) - Added self-signed certificates, can be replace if/when required.
1 parent f991bf4 commit 85edb3a

15 files changed

+284
-7
lines changed

config/cacerts/rootCA.crt

+23
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
-----BEGIN CERTIFICATE-----
2+
MIID4zCCAsugAwIBAgIUUkMgDKh3lfso5iGX1Od5SXL8v8AwDQYJKoZIhvcNAQEL
3+
BQAwgYAxCzAJBgNVBAYTAlVLMRIwEAYDVQQIDAlZb3VyU3RhdGUxETAPBgNVBAcM
4+
CFlvdXJDaXR5MRkwFwYDVQQKDBBZb3VyT3JnYW5pemF0aW9uMREwDwYDVQQLDAhZ
5+
b3VyVW5pdDEcMBoGA1UEAwwTc3JjLWRhdGEtcmVwby5jby51azAeFw0yNDA3MjQx
6+
MzMxNThaFw0yOTA3MjMxMzMxNThaMIGAMQswCQYDVQQGEwJVSzESMBAGA1UECAwJ
7+
WW91clN0YXRlMREwDwYDVQQHDAhZb3VyQ2l0eTEZMBcGA1UECgwQWW91ck9yZ2Fu
8+
aXphdGlvbjERMA8GA1UECwwIWW91clVuaXQxHDAaBgNVBAMME3NyYy1kYXRhLXJl
9+
cG8uY28udWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrprA6xONC
10+
kzmcEWzxhGqPeWVHJ5ax5k3PlqZp4saN+w5ho9RzK32iXJy66T0hm5wU5gZnm8X/
11+
+5YVUyo/Zako4gMEzesyN+WSSOPsXBOev1JHz+ekDZTm7RXjDnrlLdhHNhSkY+9F
12+
y3KZkA4XEy2Jr9HlBmzd9V2rvdr6Y5H15CTyqLtajFqj61LHxWxrBg9zz+5pZYwF
13+
8l+X8tEaGVuRms0w4IxRpnpP9FbT/ezxGLzaEtgEkTgt2wB9HIkVyAtbiq5qOuES
14+
pXvgf/EHKXs+bqTwZLtd2nxrUFpF3Zbb9WHwI7hlfJ4jvwVmjpX644E8WyDz/Ivx
15+
+m/3aR6LLvZdAgMBAAGjUzBRMB0GA1UdDgQWBBSTpCFqpJVCtIrxUEV72Ft274wX
16+
mTAfBgNVHSMEGDAWgBSTpCFqpJVCtIrxUEV72Ft274wXmTAPBgNVHRMBAf8EBTAD
17+
AQH/MA0GCSqGSIb3DQEBCwUAA4IBAQA0EMO8tYj//CjKgcklMBwuzyXKi2XP8HqS
18+
18eygdWOywAHnUkP8ha7+CYkW1wyRx63ehWWamAi076KRX/whfNEwyU8o5BIwMko
19+
qiaiIPSvA29PAuMB+vG5Vzr4NeWQo/YqEGm9zYHRn5F7RwlezjD80llVLn+FWP+a
20+
meIFHubIL3NGM+J8kUN9m2+/q1L5BkWG6UMM31Br8DastJLMFrzrNICVcWnbtP5B
21+
ae0aUacJ0r3LakSN3dqjpwjZ/V8nYe3BzRR2Z39HxPTbCWoagwE/Q2SVQFIr1F53
22+
5rS9RWLKYXIwebRdJZlQEfJ9QUUJ4n6BHT6wvmyEFqvJjFYm83AJ
23+
-----END CERTIFICATE-----

config/cacerts/rootCA.key

+30
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
-----BEGIN ENCRYPTED PRIVATE KEY-----
2+
MIIFLTBXBgkqhkiG9w0BBQ0wSjApBgkqhkiG9w0BBQwwHAQIABRlqW4llwoCAggA
3+
MAwGCCqGSIb3DQIJBQAwHQYJYIZIAWUDBAEqBBACu2PzEc7c7rDwCN7zkhBZBIIE
4+
0CK6c4PqBqWXfYE0heHJKO1i/M2W2enanYAbSWFrpUd0SApzkr6vku785zHNkfgd
5+
NGyMabmylOEBm12o17N558RRmyJ1QTHTlJYVciDtJJ8IkdihiiHkYeF3hqVK4uYd
6+
Ben2LLKyLrMopXZ4UZVxw91Anwhd/rqlsIOf5GHzkij9oKqwPtVnaF9aWqL1rSTo
7+
sS2UTI/gm+rtAiPMhwCrhRdk41aERQm+9ZFcuBmDx6bHbuiEGZO/oN0DAe5j+anF
8+
6lB6BrnV4RC1iia0PaOn/6rgwTEwl40RW156anSrlbBqIEpbQLX3KH54ga2QYcYC
9+
UNar+hyM2udgbu5+qYg664pyZOVpp9vSQch1FDDmpu1JP7lpu1x0y7J5qmIXRxoq
10+
HJBuTCTUtjOpktSh+VeP9saffwNB01PbXTCN60YlrVa59oib3hv9Dis4jyxulwxQ
11+
pYexd4uUNwVozYaYXjU4YmqWFdbiCeN+qgd3MSX3QFDhkKlTpfbTympoq0K77jnV
12+
h8scUzjkv0iQLqy68Z9s+4xq/NG5NlFH3G986yQatywz3+6IF8sRPAJGg7XoRyls
13+
aJT930RhOikFceaRPpLA6nWOqpAUps6uLWZk0tPdxEwxhMczTcQIYRaNUGmEUh8m
14+
eHcp1cbSTYRKRscsWI11owYs6UcKPACOVYum8UHwpz2Qe51WPB5ESAKnJZO8SSIE
15+
wbjUN+ZQGSh+YNlUoqrMGfo4sxznlbLzL7JebwM4fJ9aEiWebdD9Tc5zwiq9zkyd
16+
y1oQtigPcFHjImpf55PwO26WsqQ/XqoXuDvO23v1biCY5rQpeW7wTts5ZlKF/x9n
17+
4tFMvxECiskIZj7T7XDsKpUEaWInuIUeiH+ubc5sBqq0nnlE2MHUT3PaZmfwfU3O
18+
0nSmPUdepRg7ZAa3y1ZF2vfTz+gAINpJFN+lu7XsuevOIJ+kuPQ/m2myJTnZeAJg
19+
IPISjmUprxLf1evxh0Uo/O2UgRz+beu918+NQBQmnPBkepD+wb/Z+K8uBNgsL8fi
20+
hhP0zc3Vgcb1nI0OIpRPhkz9tIoD+c67faQCzU9GHqjUCXyTA5l3pga/0OBNe+eR
21+
+8DhESDXq+XaLv7uAMiSy+qdZppe97B3htfdUTv/Gt2MEdW7dODk7MwoFlOl6hYd
22+
e816cABPw4hxr6ri5JI+w7KVDNrkG/AyUMLP+PlbQL8KxC47jcRNnvYxa44Ns18m
23+
7XrfoVd4kuaT3rXIS4NAQ7L9p3AiwKTyc2Un1YIlGIDf4RYIsMnd407YyTkCKplA
24+
9yVp4qdoWNXyNZham5wqilyxPBaMDej1S/EHeK9HAfLj0P9U0FhYxeNIk8DnLGSm
25+
/nwwG0bessHnqzuq0BBHSsJC+brou52RGCSWmvpJk6DFswNDGECzGI3UeuFWVCq5
26+
DLyfKQjZQp0b+bj9za7KQqJ1I1NdtTkxXdvDVRue+cCf0vgEkK+mTu6z9ELsk1TY
27+
tS76yyiLr7yiXmbvo34rYzVLnsbVPG3hVTNiFcJeBX2TzEMdjivXfTaeAf+RYWGF
28+
wdin3Ms6/bSxoZagZmoSLsBlIeH5jdFL7Y8qVV2eIv3h8XkOUTgaBS9nz0uRZFYu
29+
XGqhDGpglfpqpDBnsHxMOHxhGqFXotmM5aztP4oUtDdb
30+
-----END ENCRYPTED PRIVATE KEY-----

config/nginx/nginx.conf

+41
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
events {}
2+
3+
http {
4+
server {
5+
listen 80;
6+
listen 443 ssl;
7+
server_name src-data-repo.co.uk;
8+
9+
ssl_certificate /etc/nginx/ssl/server.crt;
10+
ssl_certificate_key /etc/nginx/ssl/server.key;
11+
12+
ssl_protocols TLSv1.3 TLSv1.2;
13+
ssl_ciphers HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!SHA1:!DSS;
14+
15+
16+
location /reg/ {
17+
proxy_pass http://localhost:8881;
18+
proxy_set_header Host $host;
19+
proxy_set_header X-Real-IP $remote_addr;
20+
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
21+
proxy_set_header X-Forwarded-Proto $scheme;
22+
}
23+
24+
location /baldur/ {
25+
proxy_pass http://localhost:8882;
26+
proxy_set_header Host $host;
27+
proxy_set_header X-Real-IP $remote_addr;
28+
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
29+
proxy_set_header X-Forwarded-Proto $scheme;
30+
}
31+
32+
location /torkeep/ {
33+
proxy_pass http://localhost:8883;
34+
proxy_set_header Host $host;
35+
proxy_set_header X-Real-IP $remote_addr;
36+
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
37+
proxy_set_header X-Forwarded-Proto $scheme;
38+
}
39+
40+
}
41+
}

config/reg/catalina.properties

+2
Original file line numberDiff line numberDiff line change
@@ -9,3 +9,5 @@ tomcat.connector.proxyPort=443
99

1010
## enable no-op authenticator plugin
1111
ca.nrc.cadc.auth.Authenticator=ca.nrc.cadc.auth.NoOpAuthenticator
12+
13+
#ca.nrc.cadc.auth.IdentityManager=org.opencadc.auth.StandardIdentityManager

config/reg/reg-resource-caps.properties

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
#First, global services:
22

3-
ivo://skao.int/reg = https://spsrc27.iaa.csic.es/reg/capabilities
3+
ivo://skao.int/reg = https://src-data-repo.co.uk/reg/capabilities
44
ivo://skao.int/gms = https://ska-iam.stfc.ac.uk/gms/capabilities
55
ivo://skao.int/baldur = https://src-data-repo.co.uk/baldur/capabilities
66

config/torkeep/catalina.properties

+2-2
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ tomcat.connector.proxyName=src-data-repo.co.uk
1717
tomcat.connector.proxyPort=443
1818

1919
## enable no-op authenticator plugin -- obsolete because of the useage of the OIDC IdentityManager below
20-
#ca.nrc.cadc.auth.Authenticator=ca.nrc.cadc.auth.NoOpAuthenticator
20+
ca.nrc.cadc.auth.Authenticator=ca.nrc.cadc.auth.NoOpAuthenticator
2121

2222
## enable OIDC IdentityManager
23-
ca.nrc.cadc.auth.IdentityManager=org.opencadc.auth.StandardIdentityManager
23+
#ca.nrc.cadc.auth.IdentityManager=org.opencadc.auth.StandardIdentityManager

docker-compose.yml

+17-4
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,13 @@
11
services:
22
reg:
3-
image: stephenlloyd/uksrc:reg
3+
image: images.opencadc.org/core/reg:1.1.0
44
container_name: reg
55
user: "tomcat:tomcat"
66
ports:
77
- "8881:8080"
88
volumes:
9-
- ./config/reg:/config:ro
9+
- ./config/reg:/config
10+
- ./config/cacerts:/config/cacerts
1011
networks:
1112
- mynetwork
1213

@@ -17,7 +18,8 @@ services:
1718
ports:
1819
- "8882:8080"
1920
volumes:
20-
- ./config/baldur:/config:ro
21+
- ./config/baldur:/config
22+
- ./config/cacerts:/config/cacerts
2123
networks:
2224
- mynetwork
2325

@@ -27,7 +29,8 @@ services:
2729
ports:
2830
- "5432:5432"
2931
volumes:
30-
- ./config/postgres:/config:ro
32+
- ./config/postgres:/config
33+
- ./config/cacerts:/config/cacerts
3134
restart: always
3235
networks:
3336
- mynetwork
@@ -39,11 +42,21 @@ services:
3942
- "8883:8080"
4043
volumes:
4144
- ./config/torkeep:/config
45+
- ./config/cacerts:/config/cacerts
4246
- ./config/cadc-registry.properties:/config/cadc-registry.properties:ro
4347
- ./logs:/logs:ro
4448
networks:
4549
- mynetwork
4650

51+
nginx:
52+
image: nginx:latest
53+
network_mode: "host"
54+
container_name: nginx
55+
volumes:
56+
- ./config/nginx/nginx.conf:/etc/nginx/nginx.conf
57+
- ./ssl/server.crt:/etc/nginx/ssl/server.crt
58+
- ./ssl/server.key:/etc/nginx/ssl/server.key
59+
4760
networks:
4861
mynetwork:
4962
driver: bridge

harbor.sh

+35
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
script:
2+
#!/bin/bash
3+
4+
PROJ=$1
5+
IMG=$2
6+
SHA=$3
7+
8+
if [ -z "$PROJ" ]; then
9+
echo "** projects"
10+
curl -s https://images.opencadc.org/api/v2.0/projects | jq '[.[].name] | sort'
11+
echo "usage: $0 [<project> [<image> [--sha]]]"
12+
exit 0
13+
fi
14+
15+
if [ -z "$IMG" ]; then
16+
echo
17+
echo "** images"
18+
URL=https://images.opencadc.org/api/v2.0/projects/${PROJ}/repositories
19+
echo $URL
20+
curl -s $URL | jq '[.[].name] | sort'
21+
echo "usage: $0 [<project> [<image> [--sha]]]"
22+
exit 0
23+
fi
24+
25+
echo
26+
echo "** image versions"
27+
URL=https://images.opencadc.org/api/v2.0/projects/${PROJ}/repositories/${IMG}/artifacts
28+
echo $URL
29+
if [ -z "$SHA" ]; then
30+
31+
curl -s $URL | jq '[.[].tags | select (. != null) | .[].name] | sort'
32+
elif [ "$SHA" == "--sha" ]; then
33+
curl -s $URL | jq '.[]| [.digest,.tags[].name] '
34+
fi
35+

ssl/rootCA.crt

+23
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
-----BEGIN CERTIFICATE-----
2+
MIID4zCCAsugAwIBAgIUUkMgDKh3lfso5iGX1Od5SXL8v8AwDQYJKoZIhvcNAQEL
3+
BQAwgYAxCzAJBgNVBAYTAlVLMRIwEAYDVQQIDAlZb3VyU3RhdGUxETAPBgNVBAcM
4+
CFlvdXJDaXR5MRkwFwYDVQQKDBBZb3VyT3JnYW5pemF0aW9uMREwDwYDVQQLDAhZ
5+
b3VyVW5pdDEcMBoGA1UEAwwTc3JjLWRhdGEtcmVwby5jby51azAeFw0yNDA3MjQx
6+
MzMxNThaFw0yOTA3MjMxMzMxNThaMIGAMQswCQYDVQQGEwJVSzESMBAGA1UECAwJ
7+
WW91clN0YXRlMREwDwYDVQQHDAhZb3VyQ2l0eTEZMBcGA1UECgwQWW91ck9yZ2Fu
8+
aXphdGlvbjERMA8GA1UECwwIWW91clVuaXQxHDAaBgNVBAMME3NyYy1kYXRhLXJl
9+
cG8uY28udWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrprA6xONC
10+
kzmcEWzxhGqPeWVHJ5ax5k3PlqZp4saN+w5ho9RzK32iXJy66T0hm5wU5gZnm8X/
11+
+5YVUyo/Zako4gMEzesyN+WSSOPsXBOev1JHz+ekDZTm7RXjDnrlLdhHNhSkY+9F
12+
y3KZkA4XEy2Jr9HlBmzd9V2rvdr6Y5H15CTyqLtajFqj61LHxWxrBg9zz+5pZYwF
13+
8l+X8tEaGVuRms0w4IxRpnpP9FbT/ezxGLzaEtgEkTgt2wB9HIkVyAtbiq5qOuES
14+
pXvgf/EHKXs+bqTwZLtd2nxrUFpF3Zbb9WHwI7hlfJ4jvwVmjpX644E8WyDz/Ivx
15+
+m/3aR6LLvZdAgMBAAGjUzBRMB0GA1UdDgQWBBSTpCFqpJVCtIrxUEV72Ft274wX
16+
mTAfBgNVHSMEGDAWgBSTpCFqpJVCtIrxUEV72Ft274wXmTAPBgNVHRMBAf8EBTAD
17+
AQH/MA0GCSqGSIb3DQEBCwUAA4IBAQA0EMO8tYj//CjKgcklMBwuzyXKi2XP8HqS
18+
18eygdWOywAHnUkP8ha7+CYkW1wyRx63ehWWamAi076KRX/whfNEwyU8o5BIwMko
19+
qiaiIPSvA29PAuMB+vG5Vzr4NeWQo/YqEGm9zYHRn5F7RwlezjD80llVLn+FWP+a
20+
meIFHubIL3NGM+J8kUN9m2+/q1L5BkWG6UMM31Br8DastJLMFrzrNICVcWnbtP5B
21+
ae0aUacJ0r3LakSN3dqjpwjZ/V8nYe3BzRR2Z39HxPTbCWoagwE/Q2SVQFIr1F53
22+
5rS9RWLKYXIwebRdJZlQEfJ9QUUJ4n6BHT6wvmyEFqvJjFYm83AJ
23+
-----END CERTIFICATE-----

ssl/rootCA.key

+30
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
-----BEGIN ENCRYPTED PRIVATE KEY-----
2+
MIIFLTBXBgkqhkiG9w0BBQ0wSjApBgkqhkiG9w0BBQwwHAQIABRlqW4llwoCAggA
3+
MAwGCCqGSIb3DQIJBQAwHQYJYIZIAWUDBAEqBBACu2PzEc7c7rDwCN7zkhBZBIIE
4+
0CK6c4PqBqWXfYE0heHJKO1i/M2W2enanYAbSWFrpUd0SApzkr6vku785zHNkfgd
5+
NGyMabmylOEBm12o17N558RRmyJ1QTHTlJYVciDtJJ8IkdihiiHkYeF3hqVK4uYd
6+
Ben2LLKyLrMopXZ4UZVxw91Anwhd/rqlsIOf5GHzkij9oKqwPtVnaF9aWqL1rSTo
7+
sS2UTI/gm+rtAiPMhwCrhRdk41aERQm+9ZFcuBmDx6bHbuiEGZO/oN0DAe5j+anF
8+
6lB6BrnV4RC1iia0PaOn/6rgwTEwl40RW156anSrlbBqIEpbQLX3KH54ga2QYcYC
9+
UNar+hyM2udgbu5+qYg664pyZOVpp9vSQch1FDDmpu1JP7lpu1x0y7J5qmIXRxoq
10+
HJBuTCTUtjOpktSh+VeP9saffwNB01PbXTCN60YlrVa59oib3hv9Dis4jyxulwxQ
11+
pYexd4uUNwVozYaYXjU4YmqWFdbiCeN+qgd3MSX3QFDhkKlTpfbTympoq0K77jnV
12+
h8scUzjkv0iQLqy68Z9s+4xq/NG5NlFH3G986yQatywz3+6IF8sRPAJGg7XoRyls
13+
aJT930RhOikFceaRPpLA6nWOqpAUps6uLWZk0tPdxEwxhMczTcQIYRaNUGmEUh8m
14+
eHcp1cbSTYRKRscsWI11owYs6UcKPACOVYum8UHwpz2Qe51WPB5ESAKnJZO8SSIE
15+
wbjUN+ZQGSh+YNlUoqrMGfo4sxznlbLzL7JebwM4fJ9aEiWebdD9Tc5zwiq9zkyd
16+
y1oQtigPcFHjImpf55PwO26WsqQ/XqoXuDvO23v1biCY5rQpeW7wTts5ZlKF/x9n
17+
4tFMvxECiskIZj7T7XDsKpUEaWInuIUeiH+ubc5sBqq0nnlE2MHUT3PaZmfwfU3O
18+
0nSmPUdepRg7ZAa3y1ZF2vfTz+gAINpJFN+lu7XsuevOIJ+kuPQ/m2myJTnZeAJg
19+
IPISjmUprxLf1evxh0Uo/O2UgRz+beu918+NQBQmnPBkepD+wb/Z+K8uBNgsL8fi
20+
hhP0zc3Vgcb1nI0OIpRPhkz9tIoD+c67faQCzU9GHqjUCXyTA5l3pga/0OBNe+eR
21+
+8DhESDXq+XaLv7uAMiSy+qdZppe97B3htfdUTv/Gt2MEdW7dODk7MwoFlOl6hYd
22+
e816cABPw4hxr6ri5JI+w7KVDNrkG/AyUMLP+PlbQL8KxC47jcRNnvYxa44Ns18m
23+
7XrfoVd4kuaT3rXIS4NAQ7L9p3AiwKTyc2Un1YIlGIDf4RYIsMnd407YyTkCKplA
24+
9yVp4qdoWNXyNZham5wqilyxPBaMDej1S/EHeK9HAfLj0P9U0FhYxeNIk8DnLGSm
25+
/nwwG0bessHnqzuq0BBHSsJC+brou52RGCSWmvpJk6DFswNDGECzGI3UeuFWVCq5
26+
DLyfKQjZQp0b+bj9za7KQqJ1I1NdtTkxXdvDVRue+cCf0vgEkK+mTu6z9ELsk1TY
27+
tS76yyiLr7yiXmbvo34rYzVLnsbVPG3hVTNiFcJeBX2TzEMdjivXfTaeAf+RYWGF
28+
wdin3Ms6/bSxoZagZmoSLsBlIeH5jdFL7Y8qVV2eIv3h8XkOUTgaBS9nz0uRZFYu
29+
XGqhDGpglfpqpDBnsHxMOHxhGqFXotmM5aztP4oUtDdb
30+
-----END ENCRYPTED PRIVATE KEY-----

ssl/rootCA.srl

+1
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
5BEBB1DCBC28D9AF022624C9B5A0AAC54CB0B431

ssl/server.crt

+25
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
-----BEGIN CERTIFICATE-----
2+
MIIEOjCCAyKgAwIBAgIUW+ux3Lwo2a8CJiTJtaCqxUywtDEwDQYJKoZIhvcNAQEL
3+
BQAwgYAxCzAJBgNVBAYTAlVLMRIwEAYDVQQIDAlZb3VyU3RhdGUxETAPBgNVBAcM
4+
CFlvdXJDaXR5MRkwFwYDVQQKDBBZb3VyT3JnYW5pemF0aW9uMREwDwYDVQQLDAhZ
5+
b3VyVW5pdDEcMBoGA1UEAwwTc3JjLWRhdGEtcmVwby5jby51azAeFw0yNDA3MjQx
6+
MzQxMjhaFw0yNjEwMjcxMzQxMjhaMIGAMQswCQYDVQQGEwJVSzESMBAGA1UECAwJ
7+
WW91clN0YXRlMREwDwYDVQQHDAhZb3VyQ2l0eTEZMBcGA1UECgwQWW91ck9yZ2Fu
8+
aXphdGlvbjERMA8GA1UECwwIWW91clVuaXQxHDAaBgNVBAMME3NyYy1kYXRhLXJl
9+
cG8uY28udWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfrgrO0D8v
10+
HstX1wh7k2NNbkDP0vMze2yDzEkJpva0r47HcYh3heE/oNmp2tFv2sCu/6n6f75S
11+
STrnv2vjkc1ZARRPh6b8vt1ICDGNaNyqbgBxwEgMT6I5sstdlmnXrWwYmtpVV3PF
12+
ZoS5KNGIJzh/05nu/vfH+935ES5SEhPngQ1lcftgRc9QjUcXvC/RxixLgXYasPLQ
13+
9gT0W2r/QQPvNIXOpf7CUM3FIGezoZM4txDNhcPlOXDFr3hBSeSUdXFzUdqUca9k
14+
xK08mvTqNQ7u4yCQPtzHu5YfyZGAnxwBJmDEfDOmcmuo113BZ/17tGBiJFPfJVj0
15+
u40J7xKo0FsLAgMBAAGjgakwgaYwHwYDVR0jBBgwFoAUk6QhaqSVQrSK8VBFe9hb
16+
du+MF5kwCQYDVR0TBAIwADALBgNVHQ8EBAMCBPAwEwYDVR0lBAwwCgYIKwYBBQUH
17+
AwEwNwYDVR0RBDAwLoITc3JjLWRhdGEtcmVwby5jby51a4IXd3d3LnNyYy1kYXRh
18+
LXJlcG8uY28udWswHQYDVR0OBBYEFEMMwmupGb/0M2Ym2AiWuqpXJzJTMA0GCSqG
19+
SIb3DQEBCwUAA4IBAQAV+TPaTTrVMzjOTmZvP4OY4X0CzYiUlHjD7riDAJkNGeqO
20+
YQ0grVUYA1zgudQfXisrCnBZEWOafL9GDsV20eIUmvoQwgpe0+YQKTdGYwuKY4dd
21+
MfkO9RqbikhL5+kK3B9S4pWsmtZZZFTT2owh2Qg4ERNBQ2RAyRn8HWdSaVHPH0Ho
22+
+m9XC0Z3L7nus4QJOa6ZoZ2R+99u3QhlEP0/V9+Z4zkLLnKDKJvapG4MEJ0ArRhJ
23+
PeVjbRM9W+22xCzs9R/Esmu2PR6D5dalzCcrjm7/AN4FLy0fAabonpREcIjBVU0i
24+
yOWw0HxMiG2LAAq2VWkOVoQinuKbaYJAHR0dAO6m
25+
-----END CERTIFICATE-----

ssl/server.csr

+17
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
-----BEGIN CERTIFICATE REQUEST-----
2+
MIICxjCCAa4CAQAwgYAxCzAJBgNVBAYTAlVLMRIwEAYDVQQIDAlZb3VyU3RhdGUx
3+
ETAPBgNVBAcMCFlvdXJDaXR5MRkwFwYDVQQKDBBZb3VyT3JnYW5pemF0aW9uMREw
4+
DwYDVQQLDAhZb3VyVW5pdDEcMBoGA1UEAwwTc3JjLWRhdGEtcmVwby5jby51azCC
5+
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ+uCs7QPy8ey1fXCHuTY01u
6+
QM/S8zN7bIPMSQmm9rSvjsdxiHeF4T+g2ana0W/awK7/qfp/vlJJOue/a+ORzVkB
7+
FE+Hpvy+3UgIMY1o3KpuAHHASAxPojmyy12WadetbBia2lVXc8VmhLko0YgnOH/T
8+
me7+98f73fkRLlISE+eBDWVx+2BFz1CNRxe8L9HGLEuBdhqw8tD2BPRbav9BA+80
9+
hc6l/sJQzcUgZ7Ohkzi3EM2Fw+U5cMWveEFJ5JR1cXNR2pRxr2TErTya9Oo1Du7j
10+
IJA+3Me7lh/JkYCfHAEmYMR8M6Zya6jXXcFn/Xu0YGIkU98lWPS7jQnvEqjQWwsC
11+
AwEAAaAAMA0GCSqGSIb3DQEBCwUAA4IBAQABg2ocqNanUlzfwgsAIElyfhGL6hAV
12+
k9zluAp6aE+9akeZeeY1zXruKAOgxf5482zAdG2Y1IMlR7Bu2RSEzdgddmg9RPKp
13+
KJIGTav7EcGexvr2Rkb2HoTztnpAD/5TSjGjujTERyRlqqRUFqstV1kQ+1XKVUPw
14+
d1BaKdzhrfOTubGy1NuDq37YAxPnn9CcUpe5V/DDc937j2DSD68o4haLm8bLfyP2
15+
ff4AUf8q76FDhIcGjgAdYBfvNhtSZeMohkC8T3IenhO1PywrrzT+bpGl7q/2dCQN
16+
z8UWLhANDo3glr4+3hEirzzCEULDMLotMjGOh3nEUotefT0+lykbHsdO
17+
-----END CERTIFICATE REQUEST-----

ssl/server.ext

+9
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
authorityKeyIdentifier=keyid,issuer
2+
basicConstraints=CA:FALSE
3+
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
4+
extendedKeyUsage = serverAuth
5+
subjectAltName = @alt_names
6+
7+
[alt_names]
8+
DNS.1 = src-data-repo.co.uk
9+
DNS.2 = www.src-data-repo.co.uk

ssl/server.key

+28
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
-----BEGIN PRIVATE KEY-----
2+
MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCfrgrO0D8vHstX
3+
1wh7k2NNbkDP0vMze2yDzEkJpva0r47HcYh3heE/oNmp2tFv2sCu/6n6f75SSTrn
4+
v2vjkc1ZARRPh6b8vt1ICDGNaNyqbgBxwEgMT6I5sstdlmnXrWwYmtpVV3PFZoS5
5+
KNGIJzh/05nu/vfH+935ES5SEhPngQ1lcftgRc9QjUcXvC/RxixLgXYasPLQ9gT0
6+
W2r/QQPvNIXOpf7CUM3FIGezoZM4txDNhcPlOXDFr3hBSeSUdXFzUdqUca9kxK08
7+
mvTqNQ7u4yCQPtzHu5YfyZGAnxwBJmDEfDOmcmuo113BZ/17tGBiJFPfJVj0u40J
8+
7xKo0FsLAgMBAAECggEACl1jujTuRQK8tEDy/gJ9KaOEdXj97FOQoaV7ADNkRCo5
9+
HF0UPJ3mFxk7x7i6a4ZJh5J02Bu+oNy8BBr6x9TI/YQCa38kqbdB6dEOVl1+JVnq
10+
kXentZTdtN0UMkj3KdbJ83bpwSxiCWg0KUirASl6k2GK1maactK4f9hLp2wg+p/d
11+
nHGJomvK4u2m/NWNux3jgmUEB1kHFBS4vs1UgqzGntI0xmbM+bfu1nm4Gz2/IWgd
12+
1mgQ30Xk6R69oTCPznIN8Sc4aEjaI2knC4KZdXatM8s6ub3MHqdSNDvCWOhBtlHa
13+
26CrddlYzVEauUiXx7g2krL/KrpltQ1NjU96C+4AQQKBgQDNdSvGRcs/CY6Son0m
14+
QZt/tJJUhp3k7pYWfE95AEqyPjkbI8v6clOqJ48w8t96MjpeNcTjnfDZblLZi3BR
15+
Q+qmR9efxXmNImfpVRqrxpMVQQKs6nu1lpTe4FyONiVi8Aik1Z8lPyGigCuAG8op
16+
WlSYV0rb9HNcOFKeuUbIDw2NsQKBgQDG9ft1+n+KN1Dp/Ns6JaxhtdWXBnh9Y4e4
17+
VjjCdFp/sSxOWMshSY4i3mgEQ/TdvXm78v11j7FKfgR5Kb4S8/7qRQsqlww1QoaA
18+
dt45+GqSJMOI5G/fywBj/MAGQn7cas7zFn1OhdZ2rJauM+uD9B7FVvDyN2Obwtkw
19+
HRUiE3B3ewKBgAHeUuuWruZ/28ARojm61wMuTTZfkwgF82946fAbxJIiZrqMdMpu
20+
R7yAZ5j2XHnsAwPgUU4QnaQckLxRvE/A4l1owdk+HoDeEzvX/koZoDTNRoz0BPP9
21+
zpTITY8thuGDdVCqcKwSCuhDaiHcHtaJb8OC57dgXbw09utim/YtzN3BAoGAKgpg
22+
EBXWTUZS+p5LVIYRXrQlZbwgSZ52VyUg6TXcyY6OZh+tDGOWfRexsvUJELGwv14g
23+
4G50b+Eg4NlJKIgWHTppmZ5BHh/oe8yiOG2dVzQdfReH7Cng8z+885WpaLnI8OSX
24+
pbfyETF2xWiDI2a5+cjdMNEzYv5RFjGO/ZxN73ECgYA6Qf4NeKtIlGXRo/d7Pce3
25+
LkQhL0Iwsp/n15JAQAYkyYoV/H21zoIfUdPViTDaf6VZ7d+TedBS53BZt7T7uJDk
26+
/Ab5q4zHIRUot/KcVmF2xKQ56GqwoaY9RdvFCTx80rvN6Ji5M3UeWT6FonZEh0Kr
27+
or9CJy1+keOpa/Y/WG0Z3w==
28+
-----END PRIVATE KEY-----

0 commit comments

Comments
 (0)