Zowe - APIML - HTTPS south-bound edge - Certification management for Zowe installation

[plavjanik]

Issue by plavjanik
Thursday Oct 25, 2018 at 11:06 GMT
Originally opened as https://github.com/gizafoundation/api-layer/issues/195

---

As Zowe developer (Zoe), I would like to install Zowe to my z/OS system and have certificates in APIML generated using a local CA approach and have a way how to generate a certificate from my API service.

Acceptance Criteria:

1. The APIML certification management script is called as part of the Zowe installation script
2. Zoe can call the script herself after installation to generate new certificates (it mean basically to provide good documentation for it)
3. Zoe can call the script to create a new certificate for a new service
4. No one else except Zoe who installed Zowe cannot add a new service to her instance of APIML (proper permission bits)

Notes:

• depends on Zowe - APIML - HTTPS south-bound edge - Certification management for Zowe developer - localhost #72
• depends on Change script for generating keystore to use new APIML Certificate Management zowe-install-packaging#126

Very detailed tasks:

• the apiml-cm.sh script is packaged with APIML - include it in https://github.com/zowe/api-layer/blob/master/zowe-install/build.gradle#L34
• remove https://github.com/zowe/api-layer/blob/master/zowe-install/src/main/resources/scripts/api-mediation-start-template.sh if it is not needed
• create a new script zowe-install/src/main/resources/scripts/setup-apiml-certificates.sh that will use apiml-cm.shto setup certificates for APIML
• make https://github.com/zowe/api-layer/blob/master/zowe-install/src/main/resources/scripts/gen-selfsigned-keystore-template.sh call the new script (for compatibility with older installers) and create a TODO story to remove it in future
• update other scripts in https://github.com/zowe/api-layer/blob/master/zowe-install/src/main/resources/scripts to use correct parameters for the newly generated certificates
• update https://github.com/zowe/zowe-install-packaging/blob/master/scripts/zowe-api-mediation-configure.sh#L34 to call the new script with all required parameters
• create new PAX file by running build for new branch in https://github.com/zowe/zowe-install-packaging
• install that PAX file to z/OS using https://github-isl-01.ca.com/MFaaS/ca-api-layer/blob/zowe-install/scripts/zowe_install.py