To configure CA Gateway, edit the application.yml file and add the following settings.
When adding these settings, follow the conventions below.
- Use dashes ("-") instead of underscores ("_") in the key names. For example, we recommend: Instead of:
aws-api-urlaws_api_url - Expand all properties. For example, instead of: Expand the parameter as follows:
cagw:tual.properties: credentials/tual.propertiescagw:tual:properties: credentials/tual.properties - In Docker installations, the file paths must not correspond to a directory in the host but to the following directory mapped in the container. For example:
/etc/cagw/configtrust-store: /etc/cagw/ssl/truststore.jks
See below for a sample configuration using these conventions.
logging: level: root: INFO jtk: debug: false level: 0 ssl: jsse: debug: false level: sslserver: port: 8080 servlet: context-path: /cagw ssl: enabled: true insecure-mode: false protocol: TLS key-alias: cagw key-store: /etc/cagw/config/keystore.p12 key-store-password: Password key-store-type: pkcs12 trust-store: /etc/cagw/config/truststore.p12 trust-store-password: Passowrd trust-store-type: pkcs12 client-auth: needmanagement: server: port: 9090 ssl: enabled: true protocol: TLS key-alias: cagw key-store: /etc/cagw/config/keystore.p12 key-store-password: Password key-store-type: pkcs12 trust-store: /etc/cagw/config/truststore.p12 trust-store-password: Password trust-store-type: pkcs12 client-auth: want endpoint: health: group: custom: include: diskSpace,ping show-components: always show-details: always endpoints: web: base-path: /cagw/management/actuator exposure: include: health,prometheuscagw: connector-filters: filter-lists: {} cert-event-tracking: {} authorities: managed-cas: {} tenants: [] integrators: [] clients: [] deploy: enable: {} caches: subject-dn-cache: {} profile-cache: {} profiles-cache: {} subject-builder-cache: {} ca-capabilities-cache: {} ca-information-cache: {} requested-properties-cache: {} license: signed-path: /etc/cagw/config/license.lic See Running cagw-util for how to create a basic configuration.