annotate docker/backend_e2e/certificates/README @ 3489:d71a163c0861

bridge (pb): connection can be set to used either UNIX socket or TCP socket: all settings are to be put in `[DEFAULT]` section - `bridge_pb_connection_type` can be set to `unix_socket` or `socket` - for `socket`, `bridge_pb_host` and `bridge_pb_port` can be specified
author Goffi <goffi@goffi.org>
date Sun, 21 Mar 2021 22:00:55 +0100
parents 829fee174606
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
3381
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
1 Those certificates are used to activate TLS for end-2-end testing (to be as
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
2 close as possible as production environment), they are used in other containers
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
3 needing TLS certificates (notably Prosody).
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
4
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
5 To generate them, minica has been used. Minica can be found at https://github.com/jsha/minica.
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
6
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
7 The following commands have been used:
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
8
3425
829fee174606 docker (e2e): added `libervia` and `libervia.test` in certificates
Goffi <goffi@goffi.org>
parents: 3381
diff changeset
9 $ minica --domains "server1.test,*.server1.test,server2.test,server3.test,sat.test,libervia,libervia.test"
829fee174606 docker (e2e): added `libervia` and `libervia.test` in certificates
Goffi <goffi@goffi.org>
parents: 3381
diff changeset
10 $ chmod 0644 minica.pem server1.test/cert.pem && chmod 0640 server1.test/key.pem
3381
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
11
127dde80a0a5 docker: dockers images, first draft:
Goffi <goffi@goffi.org>
parents:
diff changeset
12 Note that certificates are valid for 2 years and 30 days, so they must be renewed after this delay.