From 3b6b2929a2bdbbb49943a726fbdbf51062f4e225 Mon Sep 17 00:00:00 2001
From: simonzhangsz <simonzhangsz@outlook.com>
Date: Wed, 23 Aug 2023 17:00:27 +0800
Subject: [PATCH] d

---
 config/etc/certs/rootca.crt      | Bin 0 -> 1325 bytes
 config/etc/certs/tsa-omc.crt     | Bin 0 -> 1124 bytes
 config/etc/certs/tsa-omc_pri.key |  27 +++++++++++++++++++++++++++
 config/etc/default/restconf.yaml |   5 +++--
 restagent/etc/restconf.yaml      |   5 +++--
 5 files changed, 33 insertions(+), 4 deletions(-)
 create mode 100644 config/etc/certs/rootca.crt
 create mode 100644 config/etc/certs/tsa-omc.crt
 create mode 100644 config/etc/certs/tsa-omc_pri.key

diff --git a/config/etc/certs/rootca.crt b/config/etc/certs/rootca.crt
new file mode 100644
index 0000000000000000000000000000000000000000..9cbe7160bc06490b75e09b58172dde8363ea5f49
GIT binary patch
literal 1325
zcmXqLV%0QgVisJ$%*4pVB%*N7W~=m@B`<C%i{09<b@R`;6ML5%@Un4gwRyCC=VfH%
zW@RvtGvqelWMd9xVH0L@_A}%M$^$vfJZwSv`6bSd1`6W5M#csfMn(q4CI$wkQ4;({
zhCl&xBTJ|NK@*yol#nfDWMyD(V&Z2oXky}GYGPt!*z-wqOUxx9=D3q5l6sl-%#T&e
zu+EZTd1V;*!gbEW*u|kQpZIN*YPa%A@`%5w^;~fFx|I9ZgPok2O<5+N<`rKc;_yJ=
z)gCFC4K=A#UGm~tA73ngzr>A6UEvSU343kttIsZ9O{qzi5@@`)=!e|#-)rt@nCx*C
zG+6dDz2SPO`u=A@XPia8x-EGv;ONa#<`(@|@9j}ZUD*bQxQyww6P;cz`mcXGTw}r=
zK9vjpDtXNQcDoG=8x*VlA3goy!=GRJtY;@Zz4-E0iOr5Qr31_S*RP3OUHwp4ruhD&
zAXB?L-)lbS>`~b&^X|LHlm|<aww#-;&tBWI;`c%ur%m?@wv-*S<7C%k(0(Z7>*8cB
z6z9Dn<HOXy3zo5oY-czuxWj(;z1_Cb3Aa_*%``2Ix)xiBy!SClnj&MwB7AvIht#YF
zvFg~W4TXP=*FTf(wX=3%Hox}7PeYKYYq|-`lNOn|A2t~)>-}n$oBY%CmGB%U(e2BV
zC7Jdxrg-gWXxcKbc3Q|XhNFx39r+Prw_;&P>ijkH`d53Oi+q;$yHF_IFJ}LZH~h!v
zxc%F~om6*teX5T=Cs(Yjw07X-5RX^JzWMLsxXPaee*7ZW9`(jga)n{$qKEuPclw=L
zT&ixyw)ERwulnWZ1T%JhkTbnib>!9C{zDV*3m<5|Qk?j<>|*ZQu7m5VQdA$=%bD{s
zF*7nSE{-*bHjo7-Jy|{$F&2^4_ir4Jc)8+wWBqK${YpE3EsWvyH;@NOE3-%#h&5nW
zzynes%))BG%*goPfE&c)XJG;61vcaa2u$_B1jxuB{2;sT^rEZFZD+n()@c0vKz^x|
zREJ-xqc+pa19RV-R89H6q;J|8^DAjppKls2d8T6|TWilI@a37nY};<h9a9_sKKqxr
z*SkGkl6}q!2i=Pa2?>uoe_h=$>soVm%vKGjPKBH@_vVOM5evOmNjJsbfB$vbb~c|c
zVooC5v)lJoH@s*Tu@K(ncJk=QP(_(NhM^0dMj2~P+PbYtRC#T+mxj9bI`0S5?h5=+
z=Ra${w_9!gW0fbrPw9r2_Q;?4tF^H_ba&ILpL1INMGARrZs{}SG!*!I@9E-gmOP8<
zb$@4H{;HTSZSy)m^$FKplOAQ((37ln$qS4hKimDNg4=~d<>5=)!|EJzxBsRamn>fW
zAwtCZj@2feZDxw0|3B=`HhI@AeC6eW1GBcIdZ!0lmdD=<ZF73<vwzy@dP7koDei;c
zZam7klX2n3-c=8iYCdTFx2a{!vU^v=e^EfH<@LoBKVRcX&l;EJ8=Bszi<D<ASjf-x
zrLk<+8tKZ@^$)ksXF446syq6-*591Af`4ZY{I~LY`F@$hpSv46_iA40Hr@W9Rr0!;
z$WxbdKH=JR7uP<Wb-G-wEadf>IR8(Mi}uM*W16LR`rhkxLK$!6wU>IO^4Hybs<CQY
z@O)OcHf5{OtT|u5x}1IT<kfYbj1wYLq+0A5(iOutzR10F-jB&Q(*N{BM*eAye9{sC
DAn82X

literal 0
HcmV?d00001

diff --git a/config/etc/certs/tsa-omc.crt b/config/etc/certs/tsa-omc.crt
new file mode 100644
index 0000000000000000000000000000000000000000..945a0b164f9d0b897d7cd46b2c24abf0c6c13fe3
GIT binary patch
literal 1124
zcmXqLVo5M)V)9tP%*4pVBqBL)w~qBv>zguecNh*bws1#@KDlbZ%f_kI=F#?@mywa1
zmBB#HklTQhjX9KsO_<5q&yXJ|59BcOum$DkmpD5b$cghB85>v_85tOx7#NvGLAl0I
zu7M4zeqIA^kbW*6mXOrq5<@uy8HjPBA(^>AfyCSb1?SYFlFYQs<iwIxgC<5LWCt;_
zGB7tW@-qO%xtN+585y?jE9y@um9S-5FO~klTP$GeoBeH{B2V_m?y7y5^w+<A@~4uj
zB?r!}ea*73{_5n}DMei0FRJZPzdvt*R_@^i=KY(ue4Ef{FfZbasK_4~Lnf~mr_Luc
zvgY6Z`qYZuKF7KB_)L|n!aqC38y*?Tq}7G;r$1KOd{#VfqTl!E*cQW^^)BI0?2}rT
z?2oj3Vj17zai&l^_~3sd;pqY@*JrFwI?VI&!m3NEMt@}g<sNLm+H*Q%)ogM8<?Hf#
z{l&N!cWoDx_MYCK`qlM%QM1n;xi58oiypbYp1;3A@Y;8e53TVY(W^zJxi+2VP5*g(
zlF#>dw%dFryt(_!SL5$Z{w>d}>g$7LnV1<F7#CL<lo`kZ!%>!xMT|uxp(W;c-kT-W
z-!}D`dhXQV*S3*&HIN5ME3-%#h&70;zJKF*#LE@e8|!B~?pNCRYhetpzX1<OfiNTE
ze-<VK1_M42j~~QiVP;}GU?2wKtAhAE23%|$+H8!htnADj$Z-QqEX++zj0{Yl=I6%h
z++b|iVib?B{ck?=>ZiXYUw=Gv_AWLL)t|d^V<OYb2Bi}^ca18Oe+W-HHQV^wT+?IM
zeKZ7DYcAmqU)i0II_-Vk%9N}<lb$qH--%mi?cu4tW6EaEm(r4Z>qWLalE~jId&8CU
zR>oX4AwSQh#W|&{zMpq&lDheMd31Ynx=y){ZH&Q$BL>&iEAn-u6J;2fE9)12nEG3~
zCT90JKl3;CYlAoyPWd~mux$DqdWQeW+Gm#+YW8`rpMT?RNRS=>apv<ig6|q%6{mK&
zHf`N>?a${M29hOLbnag_y|}KPduq1)zN^2VtZ)#&aYljTZHL33eSIcP(;gLnKNI@>
z%*lCs$^`%BT$plS_rQ!IX1N<L7?o3Q-uF&epJq2D>T8JTc2WMxwX2xkrHeaPo9Mc5
zixw(ZuAUg;7GJwa_xiVkD^~wH@pv;!@V$i|d75<!!PD+d&Fz`CN9dkw(w&0MkF;)I
zz0Y1He(crqr)K3}FNoSqcxHaHXv5S!?Q8b8uk%~K#9u49&*)Ye&zsZp7VT>=4Ek|L
zC9F&~ifh^5pk0T1HgQ<ao&IB*pyhcn0jrA!=Y*&4Z?(C4+9Ra6D{;DW<=15g^zQmy
z{A(^Y&2jdYx4pX$X{4~Q#Lmr)I>)+VJ<qAcgRTCr3f3@R3{+SC_iK%sE4$_jAr8C7
TS1T&cYJ3S`4!;{Wq3{a;@~+V5

literal 0
HcmV?d00001

diff --git a/config/etc/certs/tsa-omc_pri.key b/config/etc/certs/tsa-omc_pri.key
new file mode 100644
index 00000000..530f70ba
--- /dev/null
+++ b/config/etc/certs/tsa-omc_pri.key
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/config/etc/default/restconf.yaml b/config/etc/default/restconf.yaml
index 954af171..3bd36412 100644
--- a/config/etc/default/restconf.yaml
+++ b/config/etc/default/restconf.yaml
@@ -18,8 +18,9 @@ rest:
     ipv6: 
     port: 8443
     schema: https
-    certFile: /usr/local/omc/etc/certs/tsa-omc.pem
-    keyFile: /usr/local/omc/etc/certs/tsa-omc_pri.pem
+    caFile: /usr/local/omc/etc/certs/rootca.crt
+    certFile: /usr/local/omc/etc/certs/tsa-omc.crt
+    keyFile: /usr/local/omc/etc/certs/tsa-omc_pri.key
 
 database:
   type: mysql
diff --git a/restagent/etc/restconf.yaml b/restagent/etc/restconf.yaml
index 1b7ed836..0a3dc834 100644
--- a/restagent/etc/restconf.yaml
+++ b/restagent/etc/restconf.yaml
@@ -18,8 +18,9 @@ rest:
     ipv6: 
     port: 8443
     schema: https
-    certFile: /usr/local/omc/etc/certs/tsa-omc.pem
-    keyFile: /usr/local/omc/etc/certs/tsa-omc_pri.pem
+    caFile: /usr/local/omc/etc/certs/rootca.crt
+    certFile: /usr/local/omc/etc/certs/tsa-omc.crt
+    keyFile: /usr/local/omc/etc/certs/tsa-omc_pri.key
 
 database:
   type: mysql