Mercurial > libervia-backend

view docker/backend_e2e/certificates/README @ 3424:2da32cdf4e53

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
docker(libervia): build site in the image: this will avoid a build each time the container starts fresh (notably with tests), as this is time and resource consuming (notably with node modules which would need to be downloaded each time).
author Goffi <goffi@goffi.org>
date Fri, 27 Nov 2020 16:25:02 +0100
parents 127dde80a0a5
children 829fee174606
line wrap: on
line source

Those certificates are used to activate TLS for end-2-end testing (to be as
close as possible as production environment), they are used in other containers
needing TLS certificates (notably Prosody).

To generate them, minica has been used. Minica can be found at https://github.com/jsha/minica.

The following commands have been used:

$ minica --domains "server1.test,*.server1.test,server2.test,server3.test,sat.test"
$ chmod 0644 minica.pem
$ chmod 0644 server1.test/cert.pem
$ chmod 0640 server1.test/key.pem

Note that certificates are valid for 2 years and 30 days, so they must be renewed after this delay.