To configure CA Gateway, edit the application.yml
file and add the following settings.
When adding these settings, follow the conventions below.
- Use dashes ("-") instead of underscores ("_") in the key names. For example, we recommend: Instead of:
aws-api-url
aws_api_url
- Expand all properties. For example, instead of: Expand the parameter as follows:
cagw:
tual.properties: credentials/tual.properties
cagw:
tual:
properties: credentials/tual.properties
- In Docker installations, the file paths must not correspond to a directory in the host but to the following directory mapped in the container. For example:
/etc/cagw/config
trust-store: /etc/cagw/ssl/truststore.jks
See below for a sample configuration using these conventions.
logging:
level:
root: INFO
jtk:
debug:
false
level:
0
ssl:
jsse:
debug:
false
level: ssl
server:
port:
8080
servlet:
context-path: /cagw
ssl:
enabled:
true
insecure-mode:
false
protocol: TLS
key-alias: cagw
key-store: /etc/cagw/config/keystore.p12
key-store-password: Password
key-store-type: pkcs12
trust-store: /etc/cagw/config/truststore.p12
trust-store-password: Passowrd
trust-store-type: pkcs12
client-auth: need
management:
server:
port:
9090
ssl:
enabled:
true
protocol: TLS
key-alias: cagw
key-store: /etc/cagw/config/keystore.p12
key-store-password: Password
key-store-type: pkcs12
trust-store: /etc/cagw/config/truststore.p12
trust-store-password: Password
trust-store-type: pkcs12
client-auth: want
endpoint:
health:
group:
custom:
include: diskSpace,ping
show-components: always
show-details: always
endpoints:
web:
base-path: /cagw/management/actuator
exposure:
include: health,prometheus
cagw:
connector-filters:
filter-lists: {}
cert-event-tracking: {}
authorities:
managed-cas: {}
tenants: []
integrators: []
clients: []
deploy:
enable: {}
caches:
subject-dn-cache: {}
profile-cache: {}
profiles-cache: {}
subject-builder-cache: {}
ca-capabilities-cache: {}
ca-information-cache: {}
requested-properties-cache: {}
license:
signed-path: /etc/cagw/config/license.lic
See Running cagw-util for how to create a basic configuration.