Create OpenStack encrytped pwd for robot
- The new encryption mechanism provided by SO is not compatible with robot decryption algorithm. We create a new environment variable that contains the OpenStack encrypted password in a format that robot can decrypt.
Change-Id: Ibce3f17742facb20aff51a2d7e023dcd8351109e
Issue-ID: INT-1016
Signed-off-by: Marco Platania <platania@research.att.com>
diff --git a/deployment/heat/onap-oom/env/windriver/onap-oom.env b/deployment/heat/onap-oom/env/windriver/onap-oom.env
index 4d4b660..96c06c1 100644
--- a/deployment/heat/onap-oom/env/windriver/onap-oom.env
+++ b/deployment/heat/onap-oom/env/windriver/onap-oom.env
@@ -45,7 +45,7 @@
scriptVersion: "1.3.0"
rancherIpAddress: "__rancher_ip_addr__"
config:
- openStackEncryptedPasswordHere: "${OS_PASSWORD_ENCRYPTED}"
+ openStackEncryptedPasswordHere: "${OS_PASSWORD_ENCRYPTED_FOR_ROBOT}"
so:
enabled: true
so-catalog-db-adapter:
diff --git a/deployment/heat/onap-oom/scripts/deploy.sh b/deployment/heat/onap-oom/scripts/deploy.sh
index 264152f..1616ad2 100755
--- a/deployment/heat/onap-oom/scripts/deploy.sh
+++ b/deployment/heat/onap-oom/scripts/deploy.sh
@@ -111,13 +111,13 @@
source $WORKSPACE/test/ete/scripts/install_openstack_cli.sh
-#SO_ENCRYPTION_KEY=aa3871669d893c7fb8abbcda31b88b4f
-#export OS_PASSWORD_ENCRYPTED=$(echo -n "$OS_PASSWORD" | openssl aes-128-ecb -e -K "$SO_ENCRYPTION_KEY" -nosalt | xxd -c 256 -p)
+SO_ENCRYPTION_KEY=aa3871669d893c7fb8abbcda31b88b4f
+export OS_PASSWORD_ENCRYPTED_FOR_ROBOT=$(echo -n "$OS_PASSWORD" | openssl aes-128-ecb -e -K "$SO_ENCRYPTION_KEY" -nosalt | xxd -c 256 -p)
#Use new encryption method
pushd $WORKSPACE/deployment/heat/onap-oom/scripts
javac Crypto.java
-SO_ENCRYPTION_KEY=aa3871669d893c7fb8abbcda31b88b4f
+#SO_ENCRYPTION_KEY=aa3871669d893c7fb8abbcda31b88b4f
export OS_PASSWORD_ENCRYPTED=$(java Crypto "$OS_PASSWORD" "$SO_ENCRYPTION_KEY")
popd