<div dir="ltr"><div>pem is the container format, which is based on Base64.</div><div>You'll find the self-signed one on your SF deployment here: /etc/pki/tls/certs/<fqdn>.crt</div><div>You should use the same format.</div><div> </div><div>Cheers,</div><div>Fabien </div></div> <div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Jan 17, 2020 at 11:42 AM Mourad Renai <<a href="mailto:mourad.renai@veoneer.com">mourad.renai@veoneer.com</a>> wrote: </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> <div lang="EN-US"> <div class="gmail-m_3171805675068561846WordSection1"> Hello Mr Boucher, Thanks a lot for your quick answer. Here are questions from our IT-Service about ssl-certificates: Which style the certificate must have? Base64? Binary ? PFX ? We already tried to setup our own certificates and ran the sfconfig command, but get some errors. And till certificates configuration failed I thin we could not activate the AD/LDAP configuration. About the theming, I will have a look on ansible-roles/templates. Thanks Cordialement, Best regards, Mourad Renaï Principal Engineer Software Integrator Engineering/Development e-mail:<a href="mailto:mourad.renai@veoneer.com" target="_blank">mourad.renai@veoneer.com</a> Direct: +33-1-30-17-85-39 Tech Center Veoneer France SAS Address: Rue du Petit Albi Parc SILIC Batiment Le Cerynie 95800 Cergy-Pontoise France <table style="border-collapse:collapse" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="break-inside:avoid;height:14.45pt"> <td style="width:22.7pt;border:1pt solid white;padding:0cm;height:14.45pt" width="30" valign="top" nowrap> <a href="https://www.linkedin.com/company/18452321/" target="_blank"><img style="width: 0.1979in; height: 0.1979in;" src="cid:16fb34d2fdc4cff311" title="" width="19" height="19" border="0" align="left"></a> </td> <td style="width:22.7pt;border-color:white white white currentcolor;border-style:solid solid solid none;border-width:1pt 1pt 1pt medium;padding:0cm;height:14.45pt" width="30" valign="top" nowrap> <a href="https://twitter.com/Veoneer1" target="_blank"><img style="width: 0.1979in; height: 0.1979in;" src="cid:16fb34d2fdf5b16b22" title="" width="19" height="19" border="0" align="left"></a> </td> <td style="width:22.7pt;border-color:white white white currentcolor;border-style:solid solid solid none;border-width:1pt 1pt 1pt medium;padding:0cm;height:14.45pt" width="30" valign="top" nowrap> <a href="https://www.youtube.com/channel/UCRO1uMYtcNm1pzmQly1L4nw" target="_blank"><img style="width: 0.1979in; height: 0.1979in;" src="cid:16fb34d2fe1692e333" title="" width="19" height="19" border="0" align="left"></a> </td> <td style="width:22.7pt;border-color:white white white currentcolor;border-style:solid solid solid none;border-width:1pt 1pt 1pt medium;padding:0cm;height:14.45pt" width="30" valign="top" nowrap> <a href="https://www.facebook.com/Veoneer/" target="_blank"><img style="width: 0.1979in; height: 0.1979in;" src="cid:16fb34d2fe17745b44" title="" width="19" height="19" border="0" align="left"></a> </td> </tr> </tbody> </table> From: Fabien Boucher <<a href="mailto:fboucher@redhat.com" target="_blank">fboucher@redhat.com</a>> Sent: vendredi 17 janvier 2020 10:41 To: Mourad Renai <<a href="mailto:mourad.renai@veoneer.com" target="_blank">mourad.renai@veoneer.com</a>> Cc: <a href="mailto:softwarefactory-dev@redhat.com" target="_blank">softwarefactory-dev@redhat.com</a>; Matthias Brogies <<a href="mailto:matthias.brogies.external@veoneer.com" target="_blank">matthias.brogies.external@veoneer.com</a>>; Ludovic Martineau <<a href="mailto:ludovic.martineau.external@veoneer.com" target="_blank">ludovic.martineau.external@veoneer.com</a>>; Karmaidine Mougamadou <<a href="mailto:karmaidine.mougamadou@veoneer.com" target="_blank">karmaidine.mougamadou@veoneer.com</a>>; Niklas Storm <<a href="mailto:niklas.storm.external@veoneer.com" target="_blank">niklas.storm.external@veoneer.com</a>> Subject: Re: [SF 3.3] AD/LDAP Authentication configuration support request <div> <div> <div> Hi, </div> </div> <div> <div> On Fri, Jan 17, 2020 at 9:53 AM Mourad Renai <<a href="mailto:mourad.renai@veoneer.com" target="_blank">mourad.renai@veoneer.com</a>> wrote: </div> <blockquote style="border-color:currentcolor currentcolor currentcolor rgb(204,204,204);border-style:none none none solid;border-width:medium medium medium 1pt;padding:0cm 0cm 0cm 6pt;margin-left:4.8pt;margin-right:0cm"> <div> <div> Hello, I’m software integrator on a software development project at <a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.veoneer.com%2F&data=02%7C01%7Cmourad.renai%40veoneer.com%7C57f898456b2e44a902f908d79b3171c3%7C8112232996bb41cc905365e30c689cd5%7C0%7C0%7C637148508968662290&sdata=eHxSHnTgd98hlGSqL2e8o94PShE1ZLR9wLr%2BT4MtzfU%3D&reserved=0" target="_blank"> Veoneer</a>. We plan to setup a Continuous Integration engine based on your tool : Software-Factory, as it groups several tools and as described in the documentation “easy to setup”. We have setup initial configuration on SF v3.3 installation made on a virtual machine with CentOS 7. </div> </div> </blockquote> <div> </div> <div> Please note that the last SF version is 3.4 <a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.softwarefactory-project.io%2Freleases%2F3.4%2F&data=02%7C01%7Cmourad.renai%40veoneer.com%7C57f898456b2e44a902f908d79b3171c3%7C8112232996bb41cc905365e30c689cd5%7C0%7C0%7C637148508968662290&sdata=slnwrnTS4jhZJMRWmpxE%2FcKIGk2tOnISIWF7Ubsw714%3D&reserved=0" target="_blank"> https://www.softwarefactory-project.io/releases/3.4/</a> </div> <div> </div> <blockquote style="border-color:currentcolor currentcolor currentcolor rgb(204,204,204);border-style:none none none solid;border-width:medium medium medium 1pt;padding:0cm 0cm 0cm 6pt;margin-left:4.8pt;margin-right:0cm"> <div> <div> <pre style="background:white none repeat scroll 0% 0%">For now we only succeeded to run [sfconfig --provision-demo] + change our FQDN.</pre> <pre style="background:white none repeat scroll 0% 0%">The “welcome” page is reachable, but we have a warning (in Chrome) about certificates (error : NET::ERR_CERT_AUTHORITY_INVALID). Of course we can procced anyway to the link :</pre> <pre style="background:white none repeat scroll 0% 0%"><img style="width: 3.6041in; height: 3.25in;" id="gmail-m_3171805675068561846gmail-m_2020439341243433752Picture_x0020_1" src="cid:16fb34d2fe18546ed5" width="346" height="312" border="0"></pre> <pre style="background:white none repeat scroll 0% 0%"> </pre> <pre style="background:white none repeat scroll 0% 0%">We understood that the SF server should be updates with our certificates. Our IT service tried to do so within SF configuration, but the related document is not enough detailed to support us (<a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsoftwarefactory-project.io%2Fdocs%2Foperator%2Fauths.html&data=02%7C01%7Cmourad.renai%40veoneer.com%7C57f898456b2e44a902f908d79b3171c3%7C8112232996bb41cc905365e30c689cd5%7C0%7C0%7C637148508968672286&sdata=I3rTdWaQEhrxmRnUpEdUERnXGDZIqwHZZ95Vmrhq6oE%3D&reserved=0" target="_blank">https://softwarefactory-project.io/docs/operator/auths.html</a>). </pre> <pre style="background:white none repeat scroll 0% 0%">Documentations for many others kind of authentications are more explained.</pre> <pre style="background:white none repeat scroll 0% 0%"> </pre> <pre style="background:white none repeat scroll 0% 0%">So could you support us to these 2 points ?</pre> <pre style="margin-left:63.75pt;background:white none repeat scroll 0% 0%">· Configure properly our SF server within our certificates</pre> </div> </div> </blockquote> <div> </div> <div> Here, you'll find the process to setup your own certificates: <a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsoftwarefactory-project.io%2Fdocs%2Foperator%2Fconfiguration.html%23ssl-certificates&data=02%7C01%7Cmourad.renai%40veoneer.com%7C57f898456b2e44a902f908d79b3171c3%7C8112232996bb41cc905365e30c689cd5%7C0%7C0%7C637148508968672286&sdata=c3aKtRpSWlDUAK78Pv53PqKzY%2BKUBvfMPwIOy2LaPPQ%3D&reserved=0" target="_blank"> https://softwarefactory-project.io/docs/operator/configuration.html#ssl-certificates</a> </div> <div> </div> <div> </div> <blockquote style="border-color:currentcolor currentcolor currentcolor rgb(204,204,204);border-style:none none none solid;border-width:medium medium medium 1pt;padding:0cm 0cm 0cm 6pt;margin-left:4.8pt;margin-right:0cm"> <div> <div> <pre style="margin-left:63.75pt;background:white none repeat scroll 0% 0%">· Configure connection of our SF Server with our Active Directory / LDAP</pre> </div> </div> </blockquote> <div> </div> <div> We don't use this kind of authentication or are not aware of any other SF users using it. Thus it might need some debug. You'll need to set this configuration in sfconfig.yaml <a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsoftwarefactory-project.io%2Fcgit%2Fsoftware-factory%2Fsf-config%2Ftree%2Fdefaults%2Fsfconfig.yaml%23n78&data=02%7C01%7Cmourad.renai%40veoneer.com%7C57f898456b2e44a902f908d79b3171c3%7C8112232996bb41cc905365e30c689cd5%7C0%7C0%7C637148508968682276&sdata=3X4LQ3VZ8aclhQXHhYtcTVYn%2FrHr2a81f87RbOMgqKc%3D&reserved=0" target="_blank"> https://softwarefactory-project.io/cgit/software-factory/sf-config/tree/defaults/sfconfig.yaml#n78</a> and run sfconfig command again. </div> <div> Feel free to contribute back to SF code base any fixes if needed. </div> <div> </div> <blockquote style="border-color:currentcolor currentcolor currentcolor rgb(204,204,204);border-style:none none none solid;border-width:medium medium medium 1pt;padding:0cm 0cm 0cm 6pt;margin-left:4.8pt;margin-right:0cm"> <div> <div> <pre style="background:white none repeat scroll 0% 0%"> </pre> <pre style="background:white none repeat scroll 0% 0%"> </pre> <pre style="background:white none repeat scroll 0% 0%">Another “nice to have” topic is about how to make our SF Server web pages with our brand colors/logo ?</pre> <pre style="background:white none repeat scroll 0% 0%">I managed to update some html pages used by sf (sf/welcome.html as well as topmenu.html or also GeritHeaderSite.html)/</pre> <pre style="background:white none repeat scroll 0% 0%">But each time the sfconfig command is executed, all these updates are overridden by default html files (I understand that all html pages are auto-generated depending on what project/component/services are configured on SF server).</pre> <pre style="background:white none repeat scroll 0% 0%">So is there a way to put our branding colors and logo?</pre> </div> </div> </blockquote> <div> </div> <div> You might be able to make you changes directly in /usr/share/sf-config/ansible/roles/. This directory contains the ansible roles, files, templates used by sfconfig command. </div> <div> However, an updated of the sf-config package will overwrite your changes, so you'll need to save you change somewhere else too. </div> <div> </div> <div> </div> <blockquote style="border-color:currentcolor currentcolor currentcolor rgb(204,204,204);border-style:none none none solid;border-width:medium medium medium 1pt;padding:0cm 0cm 0cm 6pt;margin-left:4.8pt;margin-right:0cm"> <div> <div> <pre style="background:white none repeat scroll 0% 0%"> </pre> <pre style="background:white none repeat scroll 0% 0%"> </pre> <pre style="background:white none repeat scroll 0% 0%">Thanks in advance for your support.</pre> <pre style="background:white none repeat scroll 0% 0%"> </pre> Cordialement, Best regards, Mourad Renaï Principal Engineer Software Integrator Engineering/Development e-mail:<a href="mailto:mourad.renai@veoneer.com" target="_blank">mourad.renai@veoneer.com</a> Direct: +33-1-30-17-85-39 Tech Center Veoneer France SAS Address: Rue du Petit Albi Parc SILIC Batiment Le Cerynie 95800 Cergy-Pontoise France <table style="border-collapse:collapse" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="height:14.45pt;break-inside:avoid"> <td style="width:22.7pt;border:1pt solid white;padding:0cm;height:14.45pt" width="30" valign="top" nowrap> <a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F18452321%2F&data=02%7C01%7Cmourad.renai%40veoneer.com%7C57f898456b2e44a902f908d79b3171c3%7C8112232996bb41cc905365e30c689cd5%7C0%7C0%7C637148508968682276&sdata=wST4SKuqWSmRRJkrBLZ7hKYuqzkeOBmoekf8a5r0%2Fm8%3D&reserved=0" target="_blank"></a><a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F18452321%2F&data=02%7C01%7Cmourad.renai%40veoneer.com%7C57f898456b2e44a902f908d79b3171c3%7C8112232996bb41cc905365e30c689cd5%7C0%7C0%7C637148508968682276&sdata=wST4SKuqWSmRRJkrBLZ7hKYuqzkeOBmoekf8a5r0%2Fm8%3D&reserved=0" target="_blank"><img style="width: 0.1979in; height: 0.1979in;" src="cid:16fb34d2fdc4cff311" width="19" height="19" border="0" align="left"></a><a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F18452321%2F&data=02%7C01%7Cmourad.renai%40veoneer.com%7C57f898456b2e44a902f908d79b3171c3%7C8112232996bb41cc905365e30c689cd5%7C0%7C0%7C637148508968682276&sdata=wST4SKuqWSmRRJkrBLZ7hKYuqzkeOBmoekf8a5r0%2Fm8%3D&reserved=0" target="_blank"></a> </td> <td style="width:22.7pt;border-style:solid solid solid none;border-width:1pt 1pt 1pt medium;padding:0cm;height:14.45pt;border-color:currentcolor" width="30" valign="top" nowrap> <a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2FVeoneer1&data=02%7C01%7Cmourad.renai%40veoneer.com%7C57f898456b2e44a902f908d79b3171c3%7C8112232996bb41cc905365e30c689cd5%7C0%7C0%7C637148508968692275&sdata=eig1yNDmAM%2BpNgSZSPyafX1PwdNuCtRKKrWHdqZBfWA%3D&reserved=0" target="_blank"></a><a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2FVeoneer1&data=02%7C01%7Cmourad.renai%40veoneer.com%7C57f898456b2e44a902f908d79b3171c3%7C8112232996bb41cc905365e30c689cd5%7C0%7C0%7C637148508968692275&sdata=eig1yNDmAM%2BpNgSZSPyafX1PwdNuCtRKKrWHdqZBfWA%3D&reserved=0" target="_blank"><img style="width: 0.1979in; height: 0.1979in;" src="cid:16fb34d2fdf5b16b22" width="19" height="19" border="0" align="left"></a><a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2FVeoneer1&data=02%7C01%7Cmourad.renai%40veoneer.com%7C57f898456b2e44a902f908d79b3171c3%7C8112232996bb41cc905365e30c689cd5%7C0%7C0%7C637148508968692275&sdata=eig1yNDmAM%2BpNgSZSPyafX1PwdNuCtRKKrWHdqZBfWA%3D&reserved=0" target="_blank"></a> </td> <td style="width:22.7pt;border-style:solid solid solid none;border-width:1pt 1pt 1pt medium;padding:0cm;height:14.45pt;border-color:currentcolor" width="30" valign="top" nowrap> <a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.youtube.com%2Fchannel%2FUCRO1uMYtcNm1pzmQly1L4nw&data=02%7C01%7Cmourad.renai%40veoneer.com%7C57f898456b2e44a902f908d79b3171c3%7C8112232996bb41cc905365e30c689cd5%7C0%7C0%7C637148508968692275&sdata=WAMa3qF6u49SCz%2F%2FRFQGxpeuijY8rUhk%2Fthyq2QRrEY%3D&reserved=0" target="_blank"></a><a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.youtube.com%2Fchannel%2FUCRO1uMYtcNm1pzmQly1L4nw&data=02%7C01%7Cmourad.renai%40veoneer.com%7C57f898456b2e44a902f908d79b3171c3%7C8112232996bb41cc905365e30c689cd5%7C0%7C0%7C637148508968692275&sdata=WAMa3qF6u49SCz%2F%2FRFQGxpeuijY8rUhk%2Fthyq2QRrEY%3D&reserved=0" target="_blank"><img style="width: 0.1979in; height: 0.1979in;" src="cid:16fb34d2fe1692e333" width="19" height="19" border="0" align="left"></a><a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.youtube.com%2Fchannel%2FUCRO1uMYtcNm1pzmQly1L4nw&data=02%7C01%7Cmourad.renai%40veoneer.com%7C57f898456b2e44a902f908d79b3171c3%7C8112232996bb41cc905365e30c689cd5%7C0%7C0%7C637148508968692275&sdata=WAMa3qF6u49SCz%2F%2FRFQGxpeuijY8rUhk%2Fthyq2QRrEY%3D&reserved=0" target="_blank"></a> </td> <td style="width:22.7pt;border-style:solid solid solid none;border-width:1pt 1pt 1pt medium;padding:0cm;height:14.45pt;border-color:currentcolor" width="30" valign="top" nowrap> <a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.facebook.com%2FVeoneer%2F&data=02%7C01%7Cmourad.renai%40veoneer.com%7C57f898456b2e44a902f908d79b3171c3%7C8112232996bb41cc905365e30c689cd5%7C0%7C0%7C637148508968702269&sdata=VjGunjsbHTHQoUqfvS2k2qlTh1kJad0XAXkEyqorKWQ%3D&reserved=0" target="_blank"></a><a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.facebook.com%2FVeoneer%2F&data=02%7C01%7Cmourad.renai%40veoneer.com%7C57f898456b2e44a902f908d79b3171c3%7C8112232996bb41cc905365e30c689cd5%7C0%7C0%7C637148508968702269&sdata=VjGunjsbHTHQoUqfvS2k2qlTh1kJad0XAXkEyqorKWQ%3D&reserved=0" target="_blank"><img style="width: 0.1979in; height: 0.1979in;" src="cid:16fb34d2fe17745b44" width="19" height="19" border="0" align="left"></a><a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.facebook.com%2FVeoneer%2F&data=02%7C01%7Cmourad.renai%40veoneer.com%7C57f898456b2e44a902f908d79b3171c3%7C8112232996bb41cc905365e30c689cd5%7C0%7C0%7C637148508968702269&sdata=VjGunjsbHTHQoUqfvS2k2qlTh1kJad0XAXkEyqorKWQ%3D&reserved=0" target="_blank"></a> </td> </tr> </tbody> </table> </div> *************************************************************** Consider the environment before printing this message. To read the Company's Information and Confidentiality Notice, follow this link: <a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.veoneer.com%2Fen%2Fimportant-information-and-confidentiality-notice&data=02%7C01%7Cmourad.renai%40veoneer.com%7C57f898456b2e44a902f908d79b3171c3%7C8112232996bb41cc905365e30c689cd5%7C0%7C0%7C637148508968712262&sdata=TqVX3idntcfI8FOGx2Kwq%2FqBGD0BPoKGhrOsoh7WrWI%3D&reserved=0" target="_blank">http://www.veoneer.com/en/important-information-and-confidentiality-notice</a> *************************************************************** </div> </blockquote> </div> </div> </div> *************************************************************** Consider the environment before printing this message. To read the Company's Information and Confidentiality Notice, follow this link: <a href="http://www.veoneer.com/en/important-information-and-confidentiality-notice" target="_blank">http://www.veoneer.com/en/important-information-and-confidentiality-notice</a> *************************************************************** </div> </blockquote></div>