Commit b58b4798 authored by Alex Kakiris's avatar Alex Kakiris
Browse files

verify Vault's TLS on startup certificate calls

parent bcabf80c

capif_backend/backoffice_service/__main__.py

+3 −3
Changes for capif_backend/backoffice_service/__main__.py: 3 added lines, 3 removed lines.
Original line number Diff line number Diff line
@@ -15,7 +15,7 @@ from .controllers.me_controller import me_routes 
from flask_cors import CORS



from .utils.certs import generate_keypair_and_csr

from .utils.vault import vault_addr, vault_headers

from .utils.vault import vault_addr, vault_headers, vault_verify



# Create Flask app

app = Flask(__name__)
@@ -72,7 +72,7 @@ if LOAD_FROM_VAULT: 
    config = Config().get_config()  # get configuration from config.py

    url = f"{vault_addr()}/v1/secret/data/ca"

    headers = vault_headers()

    response = requests.request("GET", url, headers=headers, verify=False)

    response = requests.request("GET", url, headers=headers, verify=vault_verify())



    # Print the full response content for inspection

    print("Response from Vault (ca.cert request):")
@@ -93,7 +93,7 @@ if LOAD_FROM_VAULT: 
        'csr': csr_request.decode('utf-8'),

        'common_name': "superadmin"

    }

    response = requests.request("POST", url, headers=headers, data=data, verify=False)

    response = requests.request("POST", url, headers=headers, data=data, verify=vault_verify())

    backoffice_cert = json.loads(response.text)['data']['certificate']



    # Save private_key