Preliminary Commit to secure communication between Registrator and Consul
-- This is just a prep work for :
https://jira.opencord.org/browse/VOL-155,
& https://jira.opencord.org/browse/VOL-154.
Consul & Registrator - We just have to package the PKI files and Enable TLS.
-- Consul Start-Up Logs
======================
ssl.josn
=============
{
"ca_file": "/consul/config/voltha-CA-template.pem",
"cert_file": "/consul/config/voltha-cert-template.crt",
"key_file": "/consul/config/voltha-pvt-template.key",
"verify_incoming": true,
"verify_outgoing": true
}
Consul Start-up logs..
==========================
==> Starting Consul agent...
==> Consul agent running!
Version: 'v0.8.3'
Node ID: 'fc5cb7d0-106a-fa68-441f-251c5952d16c'
Node name: 'ca6ebcd10ce5'
Datacenter: 'dc1'
Server: true (bootstrap: true)
Client Addr: 0.0.0.0 (HTTP: 8501, HTTPS: 8500, DNS: 8600)
Cluster Addr: 172.18.0.4 (LAN: 8301, WAN: 8302)
Gossip encrypt: true, RPC-TLS: true, TLS-Incoming: true
Atlas: <disabled>
==> Log data will now stream in as it occurs:
======================
ssl.josn
=============
{
"ca_file": "/consul/config/voltha-CA-template.pem",
"cert_file": "/consul/config/voltha-cert-template.crt",
"key_file": "/consul/config/voltha-pvt-template.key",
"verify_incoming": false,
"verify_outgoing": false
}
Consul Start-up logs..
==========================
==> WARNING: LAN keyring exists but -encrypt given, using keyring
==> WARNING: WAN keyring exists but -encrypt given, using keyring
==> WARNING: Bootstrap mode enabled! Do not enable unless necessary
==> Starting Consul agent...
==> Consul agent running!
Version: 'v0.8.3'
Node ID: 'fc5cb7d0-106a-fa68-441f-251c5952d16c'
Node name: 'ca6ebcd10ce5'
Datacenter: 'dc1'
Server: true (bootstrap: true)
Client Addr: 0.0.0.0 (HTTP: 8501, HTTPS: 8500, DNS: 8600)
Cluster Addr: 172.18.0.6 (LAN: 8301, WAN: 8302)
Gossip encrypt: true, RPC-TLS: false, TLS-Incoming: false
Atlas: <disabled>
Change-Id: I8acc9b680019076843f8b9b331c72d7a9b973bb1
diff --git a/reg_config/voltha-CA-template.pem b/reg_config/voltha-CA-template.pem
new file mode 100755
index 0000000..020da35
--- /dev/null
+++ b/reg_config/voltha-CA-template.pem
@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----