Certificates not generating

[Venkatesh-Dayani23]

Hi Team,
We are upgrading from 4.6.0 to 5.0.0 Sunbird version. As part of upgrade we have deployed Sunbird-RC services as well. when we try to generate the certificates we are getting below error logs in the Registry service of Sunbird-RC.

registry-5f8b6f6f47-ch8x8 registry 2023-10-04T15:28:26.984805443+05:30 09:58:26.983 [http-nio-8081-exec-3] INFO d.s.elastic.ElasticServiceImpl:110 - connection info: index:attestationpolicy connectioninfo:10.2.1.5:9200
registry-5f8b6f6f47-ch8x8 registry 2023-10-04T15:28:27.061070637+05:30 09:58:27.060 [http-nio-8081-exec-3] INFO d.s.elastic.ElasticServiceImpl:114 - resthighclient obj:org.elasticsearch.client.RestHighLevelClient@5c92f1f9
registry-5f8b6f6f47-ch8x8 registry 2023-10-04T15:28:27.264307922+05:30 09:58:27.263 [http-nio-8081-exec-3] ERROR d.s.r.service.ElasticSearchService:87 - Elastic search operation - {}

Can you kindly let us know
1.How to create this index - attestationpolicy and what data is should have ?
2. How to add public and private keys for certificate sign ?

cc: @raghupathiguduri

[holashchand]

Creating the index attestationpolicy in elastic search

curl --location --request PUT 'localhost:9200/attestationpolicy?pretty=null' \
--header 'Content-Type: application/json' \
--data '{
    "settings": {}
}'

Additionally, you can refer here https://www.elastic.co/guide/en/elasticsearch/reference/7.17/index-modules.html#index-modules-settings to know more about settings

[holashchand]

Adding public key and private key for certificate sign

• To generate new public/private key pair, you can follow here or other resources available on internet
• After generating key pairs, you can replace default issuer in this file which is provided as a volume to certificate-signer
• Or you can add new entry in issuers in the same file and use that as an issuer in your credential

[sachinb80]

@holashchand Please provide us with the certificate layout if possible

[sachinb80]

@holashchand Can ypu please provide us the certificate layout for 5.0 version of sunbird?

[holashchand]

Certificate layout is defined by the implementer only, I have given all the details required to Venkatesh

[vinod303]

@coolbung @mohit @rhwarrier
As per the @holashchand's suggestion, we have now using a different cert template layout as per the credential_template.json.
Still the certificate is not getting generated.

We had a long session debugging session with @srprasanna along with Devops team. Checked RC logs, config files etc.. and also re-deployed RC. Still the certificate is not getting generated.

So his suggestion was to have a combined debugging session with RC team, SBLern and SBSAAS devops team to figure this out.

@mohit @rhwarrier seeking the team's help here. This is happening in SB Ver5.0 which we wanted to upgrade in SB SaaS. This is blocking us from doing so!
@Venkatesh-Dayani23 @holashchand

[vinod303]

@Venkatesh-Dayani23 @raghupathiguduri can you pls the post the reason for this and how it is fixed and post that pls mark this resolved/closed.