Hi,
To add on what Jimmy has already posted, can I ask you which certs you are 
using? Are you using the self-signed ones from ONAP or do you have your own 
certs?
Regards
Arul

From: [email protected] [mailto:[email protected]] On 
Behalf Of Jimmy Forsyth
Sent: Thursday, June 28, 2018 9:12 AM
To: A. Yahia Badr Eddine <[email protected]>; 
[email protected]
Subject: Re: [onap-discuss] how to check aai certificat validity

Hi,

If you have the service running, you can examine it with openssl:


openssl s_client -showcerts -connect aai.api.simpledemo.onap.org:8443


The keystore is here:



/opt/app/aai-resources/resources/etc/auth/aai_keystore



Pay special attention to the intermediate cert, there was a short time where 
the intermediate cert had a very short valid from period, so make sure you see 
2023 in yours:


Certificate[2]:

Owner: CN=intermediateCA_1, OU=OSAAF, O=ONAP, C=US

Issuer: C=US, O=ONAP, OU=OSAAF

Serial number: 2

Valid from: Tue Jun 05 08:51:41 UTC 2018 until: Mon Jun 05 08:51:41 UTC 2023

Thanks,
jimmy

From: <[email protected]<mailto:[email protected]>> on 
behalf of "A. Yahia Badr Eddine" 
<[email protected]<mailto:[email protected]>>
Date: Wednesday, June 27, 2018 at 3:42 PM
To: "[email protected]<mailto:[email protected]>" 
<[email protected]<mailto:[email protected]>>
Subject: [onap-discuss] how to check aai certificat validity

Hello,
I am having a problem related to the validity of aai certificate, could anyone 
tell me where to find aai certificate in aai vm and how to check its validity ?
Thanks

This message and the information contained herein is proprietary and 
confidential and subject to the Amdocs policy statement,

you may review at https://www.amdocs.com/about/email-disclaimer 
<https://www.amdocs.com/about/email-disclaimer>

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#10664): https://lists.onap.org/g/onap-discuss/message/10664
Mute This Topic: https://lists.onap.org/mt/22777189/21656
Group Owner: [email protected]
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to