By using AWS re:Post, you agree to the Terms of Use

Not able to create truststorePassword with amazon provided script

0

Script provided in below page for MAC OS (m1 chip) is not working

https://docs.aws.amazon.com/documentdb/latest/developerguide/connect_programmatically.html

split: /tmp/certs/rds-combined-ca-bundle.pem: No such file or directory
Error opening Certificate rds-ca-*
4377364012:error:02FFF002:system library:func(4095):No such file or directory:/AppleInternal/Library/BuildRoots/b6051351-c030-11ec-96e9-3e7866fcf3a1/Library/Caches/com.apple.xbs/Sources/libressl/libressl-2.8/crypto/bio/bss_file.c:255:fopen('rds-ca-*', 'r')
4377364012:error:20FFF002:BIO routines:CRYPTO_internal:system lib:/AppleInternal/Library/BuildRoots/b6051351-c030-11ec-96e9-3e7866fcf3a1/Library/Caches/com.apple.xbs/Sources/libressl/libressl-2.8/crypto/bio/bss_file.c:257:
unable to load certificate
Importing 
keytool error: java.io.FileNotFoundException: rds-ca-* (No such file or directory)
rm: rds-ca-*: No such file or directory
rm: /tmp/certs/rds-combined-ca-bundle.pem: No such file or directory
Trust store content is:
asked 3 months ago29 views
1 Answer
0

Greetings,

Kindly note that, I have tested the script mentioned in the link https://docs.aws.amazon.com/documentdb/latest/developerguide/connect_programmatically.html#connect_programmatically-tls_enabled for the sample shell script that imports the certificate bundle into a trust store on macOS and I was able to do so successfully.

The error mentioned in your post is generally observed when the file is not present in the mentioned path or the path is not correct. Please follow below mentioned steps for your reference.

  1. Go to /tmp folder in you Mac system : cd /tmp

  2. Create a directory name certs if not present : mkdir certs

  3. Go back to the working directory i.e. in which you intend to store the scripts and,

    a. Create a shell script with any preferred name(e.g. testsh.sh) and copy the complete script mentioned in link : https://docs.aws.amazon.com/documentdb/latest/developerguide/connect_programmatically.html#connect_programmatically-tls_enabled.

    b. Provide the <truststorePassword> for the same and save the script

  4. Now execute the script : ./testsh.sh

Following the above mentioned steps, you should be able to create a trust store named rds-truststore.jks under the folder /tmp/certs for your use case.

Thank you!

answered 3 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions