academy/mq-container
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add fix for OIDC error

Browse Source
This commit is contained in:
Robert Parker
2019-05-31 11:36:04 +01:00
parent 81c0b70a6f
commit 3c9ec5f14c
1 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
internal/tls/tls.go
View File

@@ -346,6 +346,23 @@ func processTrustCertificates(trustDir string, cmsKeyDB, p12TrustDB *KeyStoreDat
if err != nil { if err != nil {
return fmt.Errorf("Could not add certificates to PKCS#12 Truststore: %v", err) return fmt.Errorf("Could not add certificates to PKCS#12 Truststore: %v", err)
} }
// We need to relabel everything because liberty doesn't play nicely with autolabelled certs
allCerts, err := p12TrustDB.Keystore.ListAllCertificates()
if err != nil || len(allCerts) <= 0 {
return fmt.Errorf("Could not get all certificates from PKCS#12 Truststore: %v", err)
}
for i, cert := range allCerts {
cert = strings.Trim(cert, "\"")
cert = strings.TrimSpace(cert)
newLabel := fmt.Sprintf("Trust%d", i)
err = p12TrustDB.Keystore.RenameCertificate(cert, newLabel)
if err != nil || len(allCerts) <= 0 {
return fmt.Errorf("Could not get rename certificate %s to %s in PKCS#12 Truststore: %v", cert, newLabel, err)
}
}
} }
if len(cmsKeyDB.TrustedCerts) > 0 { if len(cmsKeyDB.TrustedCerts) > 0 {