Skip to content
Snippets Groups Projects
Commit b9aa44f1 authored by Carsten Karbach's avatar Carsten Karbach
Browse files

Add steps to configure certificates in container

parent 209c7d8c
Branches main
No related tags found
No related merge requests found
...@@ -45,6 +45,12 @@ RUN php /var/www/html/EventsAPI/utils/install.php ...@@ -45,6 +45,12 @@ RUN php /var/www/html/EventsAPI/utils/install.php
# DO not allow access to root doc # DO not allow access to root doc
RUN echo "deny from all" > /var/www/html/.htaccess RUN echo "deny from all" > /var/www/html/.htaccess
ADD ./servercerts /etc/ssl/certs/
ADD setup.sh /tmp/
WORKDIR /tmp
RUN ./setup.sh
RUN rm -rf /tmp/*
# Default command # Default command
CMD ["apachectl", "-D", "FOREGROUND"] CMD ["apachectl", "-D", "FOREGROUND"]
......
#!/bin/bash
APACHE_SSL_CERT=./configs/certificates/ssl-cert-eventsapi.pem
APACHE_SSL_CERT_KEY=./configs/certificates/ssl-cert-eventsapi.key
# Create local relative folder for certificates
mkdir ./servercerts
if test -e "$APACHE_SSL_CERT";then
cp $APACHE_SSL_CERT ./servercerts/ssl-cert-eventsapi.pem
fi
if test -e "$APACHE_SSL_CERT_KEY";then
cp $APACHE_SSL_CERT_KEY ./servercerts/ssl-cert-eventsapi.key
fi
docker build -t karbach/eventsapi:v1 .
#Clear automatically created folders
rm -rf ./servercerts
setup.sh 0 → 100755
#!/bin/bash
if [[ $(/usr/bin/id -u) -ne 0 ]]; then
echo "This script requires root privileges." >&2
exit 1
fi
#Adjust the certificate to use, if a special certificate was injected
SPECIALCERT=/etc/ssl/certs/ssl-cert-eventsapi.pem
KEYNAME=ssl-cert-eventsapi.key
SPECIALCERTKEY="/etc/ssl/certs/"$KEYNAME
SSLCONFFILE=/etc/apache2/sites-available/default-ssl.conf
if test -e "$SPECIALCERT";then
chmod 644 $SPECIALCERT
sed -i -e "\|^[ \t]\+SSLCertificateFile|s|SSLCertificateFile[ \t]\+.*|SSLCertificateFile "$SPECIALCERT"|" $SSLCONFFILE
fi
if test -e "$SPECIALCERTKEY";then
mv $SPECIALCERTKEY /etc/ssl/private
chmod 640 "/etc/ssl/private/"$KEYNAME
chown root:ssl-cert "/etc/ssl/private/"$KEYNAME
sed -i -e "\|^[ \t]\+SSLCertificateKeyFile|s|SSLCertificateKeyFile[ \t]\+.*|SSLCertificateKeyFile /etc/ssl/private/"$KEYNAME"|" $SSLCONFFILE
fi
File mode changed from 100644 to 100755
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment