D4Science Infrastructure

I just discovered that we already had an incident about the Terena CA certificate. But at that time I didn't know that the GARR got the certificates from them: see #414. When we'll have the needed hierarchy sorted out we shall need a new keyring for all the java services involved.

Using the right username and password I successfully created a db using https like this:

$ HOST=https://XXXX:XXXX@accounting-d4s.d4science.org
curl --cacert ./chain_TERENA_SSL_CA_2.pem -X PUT $HOST/aux

I got the pem certificate from here
https://pki.cesnet.cz/certs/chain_TERENA_SSL_CA_2.pem

Further details can be found here
http://pki.cesnet.cz/en/ch-tcs-ssl-ca-2-crt-crl.html

I just changed the certificates configuration on haproxy server to add the certificates needed to complete the trust chain.
Now curl connects successfully.

I confirm that curl works perfectly.
I'm going to test java code.