Skip to main content
Solved

IFS10 - SSL certificate deployment from Harvest?

  • July 11, 2022
  • 2 replies
  • 113 views

Forum|alt.badge.img+8
  • Sidekick (Partner)
  • 48 replies

Hi all,

It is documented here where to copy the certificate file to to be automatically deployed into keystore (for instance, during AutoBuilder):

 

https://docs.ifs.com/techdocs/foundation1/020_installation/400_installation_options/003_security/020_configure_outbound_ssl/default.htm

 

That is fine.

My question is:

Is there a way that the certificate file is put into Harvest, and then during AutoBuilder or delivery package creation it automatically gets copied to that import folder?

It would make its deployment easier at customer sites.

 

Thanks

Janos

Best answer by Charith Epitawatta

Hi @jasahu,

To my knowledge, there is no way to harvest the certificate files so that it would get automatically copied to the import folder. Furthermore, I think it would not be a good practice to store secrets such as certificates in SCM as it would allow anyone who has access to the source code repository to view and modify it.

Hope this helps!

2 replies

Charith Epitawatta
Ultimate Hero (Employee)
Forum|alt.badge.img+31
  • Ultimate Hero (Employee)
  • 1094 replies
  • Answer
  • July 15, 2022

Hi @jasahu,

To my knowledge, there is no way to harvest the certificate files so that it would get automatically copied to the import folder. Furthermore, I think it would not be a good practice to store secrets such as certificates in SCM as it would allow anyone who has access to the source code repository to view and modify it.

Hope this helps!


Forum|alt.badge.img+8
  • Author
  • Sidekick (Partner)
  • 48 replies
  • July 16, 2022

Hi Charith,

Ok, I understand that no automacity exists for this. On the other hand, when it comes to secrets, in our case it would not be a secret as this file is freely downloadable from the other party we want to communicate with (only public key in .cer file). Anyway, it is good to have reliable information on this topic.

Thanks :)

Janos