Not able to create truststorePassword with amazon provided script

Question

Script provided in below page for MAC OS (m1 chip) is not working

https://docs.aws.amazon.com/documentdb/latest/developerguide/connect_programmatically.html

```./docdbscript.sh: line 5: /tmp/certs/rds-combined-ca-bundle.pem: No such file or directory
split: /tmp/certs/rds-combined-ca-bundle.pem: No such file or directory
Error opening Certificate rds-ca-*
4377364012:error:02FFF002:system library:func(4095):No such file or directory:/AppleInternal/Library/BuildRoots/b6051351-c030-11ec-96e9-3e7866fcf3a1/Library/Caches/com.apple.xbs/Sources/libressl/libressl-2.8/crypto/bio/bss_file.c:255:fopen('rds-ca-*', 'r')
4377364012:error:20FFF002:BIO routines:CRYPTO_internal:system lib:/AppleInternal/Library/BuildRoots/b6051351-c030-11ec-96e9-3e7866fcf3a1/Library/Caches/com.apple.xbs/Sources/libressl/libressl-2.8/crypto/bio/bss_file.c:257:
unable to load certificate
Importing 
keytool error: java.io.FileNotFoundException: rds-ca-* (No such file or directory)
rm: rds-ca-*: No such file or directory
rm: /tmp/certs/rds-combined-ca-bundle.pem: No such file or directory
Trust store content is:

Omkar_S · Answer

Greetings,

Kindly note that, I have tested the script mentioned in the link https://docs.aws.amazon.com/documentdb/latest/developerguide/connect_programmatically.html#connect_programmatically-tls_enabled for the sample shell script that imports the certificate bundle into a trust store on macOS and I was able to do so successfully.

The error mentioned in your post is generally observed when the file is not present in the mentioned path or the path is not correct. Please follow below mentioned steps for your reference.

1. Go to /tmp folder in you Mac system  :  cd /tmp

2. Create a directory name certs if not present  :  mkdir certs

3. Go back to the working directory i.e. in which you intend to store the scripts and,

a. Create a shell script with any preferred name(e.g. testsh.sh) and copy the complete script mentioned in link : https://docs.aws.amazon.com/documentdb/latest/developerguide/connect_programmatically.html#connect_programmatically-tls_enabled.
    
    b. Provide the  for the same and save the script

4. Now execute the script  :  ./testsh.sh

Following the above mentioned steps, you should be able to create a trust store named rds-truststore.jks under the folder /tmp/certs for your use case.

Thank you!

Not able to create truststorePassword with amazon provided script

Relevant content