install ldap ca crt

Author: terrywbrady

Dockerfile

@@ -8,6 +8,14 @@ FROM ${ECR_REGISTRY}/mysql-ruby-lambda
 ENV RACK_CONFIG=app/config_mrt.ru
 ENV TZ=America/Los_Angeles
 
+# ui logic that is working
+# RUN mkdir /usr/local/share/ca-certificates/extra
+# COPY docker/ldap-ca.crt /usr/local/share/ca-certificates/extra/ldap-ca.crt
+# RUN /usr/sbin/update-ca-certificates
+
+# copy default ca cert for opendj
+COPY docker/ldap-ca.crt /etc/pki/ca-trust/source/anchors/ldap-ca.crt
+# copy uc3 self-signed ca cert for use with EC2 ldap
 COPY UC3-Self-Signed-CA.crt /etc/pki/ca-trust/source/anchors/UC3-Self-Signed-CA.crt
 RUN /usr/bin/update-ca-trust extract
 

app/lib/routes/services.rb

@@ -596,7 +596,7 @@ def self.registered(app)
           audit_online_bytes_count = row.fetch('audit_online_bytes_count', 0).to_i
           audit_nearline_file_count = row.fetch('audit_nearline_file_count', 0).to_i
         end
-        # json values were being written in exponential notation, so converting to int and back to float 
+        # json values were being written in exponential notation, so converting to int and back to float
         # to get a more readable value when loading to CW metrics.  We lose precision on values less than 10MB.
         metrics.merge!({
           number_of_active_replications: repcount,

docker/ldap-ca.crt

@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----