CAS 7.1.3 deployment in AWS ECS

[Ankit Kumar]

Hello Folks,

I was able to run CAS 7.1.3 locally in my machine but in order to do it I had to run bunch of keystore commands to generate jks file and add to my java home certs

keytool -genkey -keyalg RSA -alias cas -keystore thekeystore -storepass changeit -validity 360 -keysize 2048

keytool -importkeystore -srckeystore thekeystore -destkeystore $JAVA_HOME/lib/security/cacerts

sudo keytool -delete -file cas.crt -keystore /Users/ankit.kumar1/.sdkman/candidates/java/current/lib/security/cacerts -alias cas -storepass changeit

sudo keytool -import -file cas.crt -keystore /Users/ankit.kumar1/.sdkman/candidates/java/current/lib/security/cacerts -alias cas -storepass changeit

keytool -export -alias cas -keystore thekeystore -file cas.crt -storepass changeit

I am not certain if this is the most efficient and correct way to do it but can someone please walk me through the steps on how did they deploy in AWS ECS or any other cloud provider.

Appreciate all the help in advance

Cheers

[Ankit Kumar]

Ray Bon

Would you have any insight into this perhaps? 

Thanks
Ankit

[Pablo Vidaurri]

Doing something similar within docker file to build AWS ECR image:

USER root
RUN keytool -trustcacerts -keystore $JAVA_HOME/lib/security/cacerts -storepass changeit -importcert -alias "Root CA" -file "/tmp/root_ca.crt"  -noprompt

Not sure of another more efficient way unless you create a base image with required certs already included to use in  your docker. But the way it is should not take time to execute.

-psv