Expose path to CA certificates in SiaUtils

1 files changed, 7 insertions, 0 deletions

diff --git a/vespa-athenz/src/main/java/com/yahoo/vespa/athenz/utils/SiaUtils.java b/vespa-athenz/src/main/java/com/yahoo/vespa/athenz/utils/SiaUtils.java
index 40f12b9c6db..4d7f4b1c397 100644
--- a/vespa-athenz/src/main/java/com/yahoo/vespa/athenz/utils/SiaUtils.java
+++ b/vespa-athenz/src/main/java/com/yahoo/vespa/athenz/utils/SiaUtils.java
@@ -52,6 +52,13 @@ public class SiaUtils {
                 .resolve(String.format("%s.%s.cert.pem", service.getDomainName(), service.getName()));
     }
 
+    public static Path getCaCertificatesFile() {
+        // The contents of this is the same as /opt/yahoo/share/ssl/certs/athenz_certificate_bundle.pem installed
+        // by the yahoo_certificates_bundle RPM package, except the latter also contains a textual description
+        // (decoded) of the certificates.
+        return DEFAULT_SIA_DIRECTORY.resolve("certs").resolve("ca.cert.pem");
+    }
+
     public static Optional<PrivateKey> readPrivateKeyFile(AthenzIdentity service) {
         return readPrivateKeyFile(DEFAULT_SIA_DIRECTORY, service);
     }