Expose path to CA certificates in SiaUtils
@@ -52,6 +52,13 @@ public class SiaUtils {
.resolve(String.format("%s.%s.cert.pem", service.getDomainName(), service.getName()));
}
+ public static Path getCaCertificatesFile() {
+ // The contents of this is the same as /opt/yahoo/share/ssl/certs/athenz_certificate_bundle.pem installed
+ // by the yahoo_certificates_bundle RPM package, except the latter also contains a textual description
+ // (decoded) of the certificates.
+ return DEFAULT_SIA_DIRECTORY.resolve("certs").resolve("ca.cert.pem");
+ }
+
public static Optional<PrivateKey> readPrivateKeyFile(AthenzIdentity service) {
return readPrivateKeyFile(DEFAULT_SIA_DIRECTORY, service);
}
