GSA / GSA/datagov-logstack

System Certificates are not installed properly

Open
#41 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
3
Forks
4
PR merge metrics
No merged PRs in 30d

Description

The following error occurs every time that logstash starts up and it's been there ever since I've been working with this repo,
![image](https://user-images.githubusercontent.com/85196563/166247776-e0dea31d-62d3-4f67-b8a0-380d39d9f8ad.png)

The code in question is in the `.profile`
```bash
echo "Installing Cloud Foundry root CA certificate..."
cp "$LS_HOME"/jdk/lib/security/cacerts "$LS_HOME"/jdk/lib/security/jssecacerts
shopt -s nullglob # Skip the loop if there're no matching files
for cert in "${CF_SYSTEM_CERT_PATH:-/etc/cf-system-certificates}/*" ; do
echo "Installing certificates: $cert"
# We haven't ever seen someone change this default password, and anyone who
# can see this already has permission to update these files, so we're not
# setting anything more complicated to avoid complications down the line.
"$LS_HOME"/jdk/bin/keytool -noprompt -import -trustcacerts -file "$cert" -storepass changeit -alias "${cert/$CF_SYSTEM_CERT_PATH\//}" -keystore "$LS_HOME"/jdk/lib/security/jssecacerts
done
```

Upon ssh'ing into an app on cloud.gov, I've verified that the directory doesn't exist, even though [the documentation says it should](https://docs.cloudfoundry.org/devguide/deploy-apps/trusted-system-certificates.html).

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.