Skip to content

Commit

Permalink
chore(docs): Add commands to generate a X.509 certificate locally (#323)
Browse files Browse the repository at this point in the history
  • Loading branch information
SebastianOpriel authored Sep 23, 2024
1 parent 5be0b55 commit 01c04ac
Show file tree
Hide file tree
Showing 2 changed files with 15 additions and 1 deletion.
2 changes: 2 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,8 @@ please see [changelog_updates.md](docs/dev/changelog_updates.md).

#### Patch

- Docs describe how to locally self-generate X.509 certificates ([#192](https://github.com/sovity/authority-portal/issues/192))

### Known issues

### Deployment Migration Notes
Expand Down
14 changes: 13 additions & 1 deletion docs/product/user-documentation/Manage Data Space components.md
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,19 @@ When clicking on the button "Provide Connector" in the upper right corner a mask

![provide-connector](images/provide-connector.png)

To provide a connector in the Authority Portal all fields of the mask must be submitted. The process is identical to the registration of connectors for users without any application role but registers the connector for another organization who is named in the slightly changed registration mask.
To provide a connector in the Authority Portal all fields of the mask must be submitted. The process is identical to the registration of connectors for users without any application role but registers the connector for another organization who is named in the slightly changed registration mask.

You might generate the required certificate within the browser or alternatively via a Linux shell with `openssl` and `keytool` installed:

```bash
$ openssl req -x509 -newkey rsa:2048 -keyout key.pem -out connector-certificate.crt -nodes -days 1825
$ openssl pkcs12 -export -in connector-certificate.crt -inkey key.pem -out connector-certificate.p12
$ keytool -importkeystore -srckeystore connector-certificate.p12 -srcstoretype pkcs12 -destkeystore connector-certificate.jks
```

> [!TIP]
> By ticking the checkbox "Use the Connector's JWKS URL [...]", you can define a JWKS endpoint to automatically fetch the certificate from and thus skip the certificate step. sovity's CaaS (Connector-as-a-Service) are equipped with this functionality.
After clicking on the register button the list of provided connectors appears, where the added connector can be found.

#### 3. Assign Service Partner Admin role to users within own organization
Expand Down

0 comments on commit 01c04ac

Please sign in to comment.