commit
34a9032874
2 changed files with 44 additions and 0 deletions
@ -0,0 +1,16 @@ |
|||||
|
FROM adoptopenjdk:11-jre-hotspot |
||||
|
|
||||
|
RUN curl -L -o /usr/local/bin/mkcert https://github.com/FiloSottile/mkcert/releases/download/v1.4.1/mkcert-v1.4.1-linux-amd64 \ |
||||
|
&& chmod 755 /usr/local/bin/mkcert |
||||
|
|
||||
|
ADD run.sh /usr/local/bin/run.sh |
||||
|
|
||||
|
ENV PATH="/usr/local/bin:${PATH}" |
||||
|
ENV CAROOT=/certs/ TRUST_STORES="" |
||||
|
ENV SERVER_HOSTNAMES="docker.for.mac.localhost docker.for.win.localhost microcks-keycloak" |
||||
|
ENV JKS_PASSWORD="super-secret" |
||||
|
|
||||
|
VOLUME /certs |
||||
|
WORKDIR /certs |
||||
|
|
||||
|
ENTRYPOINT [ "/usr/local/bin/run.sh" ] |
||||
@ -0,0 +1,28 @@ |
|||||
|
#!/bin/sh |
||||
|
|
||||
|
if [ -z "$CAROOT" ]; then |
||||
|
echo "CAROOT environment variable not defined. Please set CAROOT to the desired directory." |
||||
|
exit 1 |
||||
|
fi |
||||
|
|
||||
|
if [ -z "$SERVER_HOSTNAMES" ]; then |
||||
|
echo "SERVER_HOSTNAMES environment variable not defined. Please set SERVER_HOSTNAMES to the desired hostnames (each hostname being separated by a space)." |
||||
|
exit 1 |
||||
|
fi |
||||
|
|
||||
|
set -e # Exit immediately if a command exits with a non-zero status. |
||||
|
|
||||
|
mkcert -cert-file "$CAROOT/server.crt" -key-file "$CAROOT/server.key" $SERVER_HOSTNAMES |
||||
|
mkcert -pkcs12 -p12-file "$CAROOT/server.p12" $SERVER_HOSTNAMES |
||||
|
|
||||
|
echo "Creating truststore..." |
||||
|
echo |
||||
|
keytool -import -file "$CAROOT/rootCA.pem" -alias RootCA -keystore "$CAROOT/truststore.jks" -storepass "$JKS_PASSWORD" -trustcacerts -noprompt |
||||
|
echo |
||||
|
echo "Creating keystore..." |
||||
|
echo |
||||
|
keytool -importkeystore -srckeystore "$CAROOT/server.p12" -srcstorepass "changeit" -srcstoretype pkcs12 -destkeystore "$CAROOT/keystore.jks" -deststoretype jks -deststorepass "$JKS_PASSWORD" -destkeypass "$JKS_PASSWORD" -noprompt |
||||
|
echo |
||||
|
echo "Importing Root CA certificate into keystore..." |
||||
|
echo |
||||
|
keytool -import -file "$CAROOT/rootCA.pem" -alias RootCA -keystore "$CAROOT/keystore.jks" -storepass "$JKS_PASSWORD" -trustcacerts -noprompt |
||||
Loading…
Reference in new issue