How to Verify certificate is installed correctly or not?

[YogarajRethinasamy]

Hi,

I have got the certificate from fraunhofer, as per the documentation [https://international-data-spaces-association.github.io/DataspaceConnector/Deployment/Configuration#step-2-ids-certificate] i have updated everything.

But i dont know how to verify my certificate is installed correctly or not

Kindly help me out on this

[ronjaquensel]

Hi,

you can verify this by sending a description request to your own connector (/api/ids/description with recipient [your-connector-url]/api/ids/data).

If the connectorDeployMode is set to productive deployment and no valid IDS certificate is configured, the message sending will fail and you will see the following logs:

ERROR - PRODUCTIVE_DEPLOYMENT: No IDS-Message sent! No DAT could be acquired from DAPS! [reason=(Mandatory required information of the connector certificate is missing (AKI/SKI)! Needed to determine the fingerprint of the connector for the DAPS! Possible reason: Are you using a valid connector certificate issued by the DAPS?)]

If the connectorDeployMode is set to productive deployment and a valid IDS certificate is correctly configured, you will receive the connector's self-description and see the following logs:

INFO - Successfully received DAT from DAPS.
[...]
INFO - Successfully verified DAT claims.

[YogarajRethinasamy]

FYI: We are not using any DB, i have just cloned the git repo & changed the certificates that are provided by franhoufer.

[tmberthold]

Did you try a maven clean and maven package, after the config and the certificates have been adjusted (in case you should start the connector as jar)?

[YogarajRethinasamy]

Just now i tried to do clean maven, now build failure

[root@ip-10-61-20-115 DataspaceConnector]# ./mvnw clean package
[INFO] Scanning for projects...
[INFO]
[INFO] -----------------------< io:dataspaceconnector >------------------------
[INFO] Building Dataspace Connector 6.1.0
[INFO] --------------------------------[ jar ]---------------------------------
[INFO]
[INFO] --- maven-clean-plugin:3.1.0:clean (default-clean) @ dataspaceconnector ---
[INFO] Deleting /root/DataspaceConnector/target
[INFO]
[INFO] --- maven-enforcer-plugin:3.0.0-M3:enforce (enforce-maven) @ dataspaceconnector ---
[INFO]
[INFO] --- maven-resources-plugin:3.2.0:resources (default-resources) @ dataspaceconnector ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Using 'UTF-8' encoding to copy filtered properties files.
[INFO] Copying 12 resources
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 2.866 s
[INFO] Finished at: 2021-09-17T11:19:25Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.apache.maven.plugins:maven-resources-plugin:3.2.0:resources (default-resources) on project dataspaceconnector: Input length = 1 -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:

[ronjaquensel]

This error might occur due to invalid characters in the files located in the resources folder. What changes did you make after cloning the repository?

[YogarajRethinasamy]

These are the changes that i made after receiving certificates from fraunhour, can you kindly guide me is there anything else that i need to change apart from these

config.json

"ids:connectorDeployMode" : {
"@id" : "idsc:PRODUCTIVE_DEPLOYMENT"
},
"ids:connectorDescription" : {
"@type" : "ids:BaseConnector",
"@id" : "https://xxxx.ids.com",

"ids:hasDefaultEndpoint" : {
"@type" : "ids:ConnectorEndpoint",
"@id" : "https://w3id.org/idsa/autogen/connectorEndpoint/e5e2ab04-633a-44b9-87d9-a097ae6da3cf",
"ids:accessURL" : {
"@id" : "https://xxx.ids.com/api/ids/data"
}
"ids:connectorStatus" : {
"@id" : "idsc:CONNECTOR_ONLINE"
},
"ids:keyStore" : {
"@id" : "file:///conf/xxx.ids.com.p12"
}

appilication.propereities

TLS

server.ssl.enabled=true
server.ssl.key-store-type=PKCS12
server.ssl.key-store=classpath:conf/xxx.ids.com.p12
server.ssl.key-store-password=password
server.ssl.key-alias=1
#security.require-ssl=true

IDSCP

application.http.base-url=https://xxx.ids.com
idscp2.enabled=false
idscp2.keystore=./src/main/resources/conf/xxx.ids.com.p12
idscp2.truststore=./src/main/resources/conf/truststore.p12

Error

[INFO] Results:
[INFO]
[ERROR] Errors:
[ERROR] ContractAgreementHandlerTest.handleMessage_validAgreement_returnMessageProcessedNotificationMessageAndLogToCH:248 ClassCast
[ERROR] ContractRequestHandlerTest.checkContractRequest_validRequest_returnOk:493 ClassCast
[ERROR] DescriptionRequestHandlerTest.handleMessage_validResourceDescriptionMsgKnownId_returnResourceDescription:176 ClassCast
[ERROR] DescriptionRequestHandlerTest.handleMessage_validSelfDescriptionMsg_returnSelfDescription:114 ClassCast
[INFO]
[ERROR] Tests run: 1341, Failures: 0, Errors: 4, Skipped: 1
[INFO]