UNCLASSIFIED - NO CUI

Skip to content

Fortify HTTPTruststore Configuration Not Mounting Expected Files

I'm trying to configure a custom truststore for client certificate verification using httpTruststoreFileEntry and httpTruststorePasswordEntry. The files specified in httpTruststoreFileEntry and httpTruststorePasswordEntry should be mounted and accessible in /app/secrets/ per the webapp/secret templating, however, the files are not mounted despite correct(?) configuration and environment variables. Anyone with some expertise on this that can offer some insight as to what I might be missing? Thanks!

I've created a secret dubbed fortify-truststore containing:

data:
  fortify-truststore.jks: <base64-encoded-truststore>
  truststore-password.txt: <base64-encoded-password>

Fortify values include the below:

secretRef:
  name: "fortify-truststore"
  keys:
    httpTruststoreFileEntry: "fortify-truststore.jks"
    httpTruststorePasswordEntry: "truststore-password.txt"

Env variables do get passed, but /app/secrets still only contains the default chart managed fortify-ssc-secret file/s.

HTTP_SERVER_TRUSTSTORE_FILE: /app/secrets/fortify-truststore.jks
HTTP_SERVER_TRUSTSTORE_PASSWORD_FILE: /app/secrets/truststore-password.txt

ls -latr /app/secrets/
total 28
-rw-r--r--. 1 fortify fortify   24 Jan  3 02:43 truststore.password
-rw-r--r--. 1 fortify fortify  476 Jan  3 02:43 ssc.autoconfig
-rw-r--r--. 1 fortify fortify   24 Jan  3 02:43 ssc-service.jks.password
-rw-r--r--. 1 fortify fortify   24 Jan  3 02:43 ssc-service.jks.key.password
-rw-------. 1 fortify fortify 4304 Jan  3 02:43 ssc-service.jks