Handling SSL certificate file

[adholland]

Hi,

I'm attempting to use the etcd4j lib to access an etcd service within BlueMix. The issue I have is how to handle the certificate (ca_certificate_base64) contained in the credentials below : -

{
"compose-for-etcd": [
{
"credentials": {
"db_type": "etcd",
"name": "bmix-dal-yp-03b4f889-d2c1",
"uri_cli": "etcdctl --ca-file [CA_CERT_FILE] --no-sync --peers https://bluemix-address-portal.8.dblayer.com:25302,https://bluemix-address-portal.7.dblayer.com:25302 -u root:PASSWORD ls /",
"uri_direct_1": "https://root:PASSWORD@bluemix-address-portal.7.dblayer.com:25302/v2/keys",
"ca_certificate_base64": "cert_blah_blah=",
"deployment_id": "deployment_id",
"uri": "https://root:_PASSWORD@bluemix-address-portal.8.dblayer.com:25302/v2/keys"
},
"syslog_drain_url": null,
"label": "compose-for-etcd",
"provider": null,
"plan": "Standard",
"name": "Compose for etcd-zk",
"tags": [
"big_data",
"data_management",
"ibm_created",
"ibm_beta"
]
}
]
}

I'm not sure how I create the etcd4j client and initialise it with the ca certificate.

[adholland]

Attempting to use the client, passing in the cert as follows: -

        final X509Certificate caCert = (X509Certificate)cf.generateCertificate(is);
        final TrustManagerFactory tmf = TrustManagerFactory
                .getInstance(TrustManagerFactory.getDefaultAlgorithm());
        final KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType());
        ks.load(null);
        ks.setCertificateEntry("caCert", caCert);

        tmf.init(ks);

        final SSLContext sslContext = SSLContext.getInstance("TLS");
        sslContext.init(null, tmf.getTrustManagers(), null);
        final EtcdSecurityContext esContent = new EtcdSecurityContext(sslContext, etcdUser, etcdPassword);
        final EtcdClient etcdClient = new EtcdClient(esContent, URI.create(etcdURL));
        final String health = etcdClient.getHealth().getHealth();

This code just hangs when I hit the getHealth() method.

Note: Using liberty.

[adholland]

Using etcd4j with the following code also hangs on the getHealth() method: -

        final InputStream is = new ByteArrayInputStream(sslBytes);
        final SslContext sslContext = SslContextBuilder.forClient().trustManager(is).build();
        final EtcdClient etcdClient = new EtcdClient(sslContext, etcdUser, etcdPassword, URI.create(etcdURL));
        final String health = etcdClient.getHealth().getHealth();

[adholland]

looks like it may be related to #139