Prod deployment not working, because SSL certificate missing - Githubissues

mercedes-benz / sechub

SecHub provides a central API to test software with different security tools.

https://mercedes-benz.github.io/sechub/

MIT License

263 stars 63 forks source link

Prod deployment not working, because SSL certificate missing #49

Closed de-jcup closed 5 years ago

de-jcup commented 5 years ago

PROD deployment failed because SSL certificate for PROD not found/available, output was:

WARN 7 --- [ main] ConfigServletWebServerApplicationContext : Exception encountered during context initialization - cancelling refresh attempt: org.springframework.context.ApplicationContextException: Unable to start web server; nested exception is java.lang.IllegalArgumentException: Resource location must not be null

de-jcup commented 5 years ago

Problem

Problem is that prod SSL certificate

is no longer configured in prod profile (was removed because of refactorings before going OSS)
setting spring values directly ala SERVER_SSL_KEYSTORE etc. is a little bit tricky when providing local server profile as well in combination with kubernetes and secret key references to environments....

Solution

define inside prod profile a configurable path to SSL certificate (should be a file path)
we will use${SECHUB_SERVER_SSL_KEYSTORE_LOCATION} an example value could be file:/var/server/certificate/prod-keystore.p12
we must provide also key-alias by ${SECHUB_SERVER_SSL_KEYSTORE_ALIAS}
password is provided by ${SECHUB_SERVER_SSL_KEYSTORE_PASSWORD}