quay/conf/init/certs_create.sh

#! /bin/bash
set -e
QUAYPATH=${QUAYPATH:-"."}
QUAYCONF=${QUAYCONF:-"$QUAYPATH/conf"}
cd ${QUAYDIR:-"/"}
# Create certs for jwtproxy to mitm outgoing TLS connections
echo '{"CN":"CA","key":{"algo":"rsa","size":2048}}' | cfssl gencert -initca - | cfssljson -bare mitm
cp mitm-key.pem $QUAYCONF/mitm.key
cp mitm.pem $QUAYCONF/mitm.cert
cp mitm.pem /usr/local/share/ca-certificates/mitm.crt
Creat mitm certs on boot 2016-04-25 21:13:38 +00:00			`#! /bin/bash`
			`set -e`
Use $QUAYPATH and $QUAYDIR in conf and init files 2017-02-01 23:17:25 +00:00			`QUAYPATH=${QUAYPATH:-"."}`
			`QUAYCONF=${QUAYCONF:-"$QUAYPATH/conf"}`
			`cd ${QUAYDIR:-"/"}`
address review comments - more inline documentation - don't explicitly specify audience - approver is optional in `generate_key` - ADD -> RUN for better caching of jwtproxy 2016-04-29 01:10:28 +00:00			`# Create certs for jwtproxy to mitm outgoing TLS connections`
Creat mitm certs on boot 2016-04-25 21:13:38 +00:00			`echo '{"CN":"CA","key":{"algo":"rsa","size":2048}}' \| cfssl gencert -initca - \| cfssljson -bare mitm`
Use $QUAYPATH and $QUAYDIR in conf and init files 2017-02-01 23:17:25 +00:00			`cp mitm-key.pem $QUAYCONF/mitm.key`
			`cp mitm.pem $QUAYCONF/mitm.cert`
Creat mitm certs on boot 2016-04-25 21:13:38 +00:00			`cp mitm.pem /usr/local/share/ca-certificates/mitm.crt`