Issues and Workaround

If AAF stops working, e.g. AAI returns authorization error, bounce AAF aaf-locate and aaf-service containers. 


Check SSL certificate expiration (script from Brian). Run from Robot pod

Check Certificate Expiration 
for server in aaf-service.onap:8100 aai.onap:8443 vid.onap:8443 portal-app.onap:8443 sdc-fe.onap:9443 sdc-be.onap:8443 clamp.onap:8443 pap.onap:8443 aai-sparky-be:8000;
do
    host=$(echo $server | cut -d ":" -f 1)
echo | openssl s_client -showcerts -servername $host -connect $server  2>/dev/null | openssl x509 -inform pem -noout -text  | grep -E "Not After|Not Before|Issuer:|Subject:"
done
        Issuer: C = US, O = ONAP, OU = OSAAF, CN = intermediateCA_9
            Not Before: Mar  6 14:46:53 2019 GMT
            Not After : Mar  5 14:46:53 2020 GMT
        Subject: C = US, O = ONAP, OU = aaf@aaf.osaaf.org, OU = OSAAF, CN = aaf.onap
  • No labels