mbiryukova/certificates
1
0
Fork 0
forked from TrueCloudLab/certificates
Code Pull requests Activity
3350 commits 33 branches 197 tags 41 MiB
Commit graph

33 commits

Author SHA1 Message Date
Carl Tashian
328276eaeb
Shred provisioner password 2023-01-09 18:01:14 -08:00
Carl Tashian
ad5cbd9a0e
Print and delete provisioner password on setup 2023-01-09 17:59:33 -08:00
Carl Tashian
a017238874
No need for PROVISIONER_PWDPATH 2023-01-09 17:23:47 -08:00
Carl Tashian
313bf2354b
Check for existance of pwdpath before copying 2023-01-09 17:08:24 -08:00
Carl Tashian
640bd0b7c7
Tabs to spaces 2023-01-09 16:51:36 -08:00
Carl Tashian
c836c7ab40
Backward compatibility 2023-01-09 16:48:31 -08:00
Carl Tashian
8242895909
Update hsm dockerfile as well 2023-01-09 16:39:34 -08:00
Carl Tashian
844cfd3bad
Generate and use independent provisioner and private key passwords 2023-01-09 16:36:00 -08:00
Herman Slatman
4e3a6e67f1
Add env vars for enabling Remote Management and ACME provisioner. 
A `step-ca` instance created in a container can now be initialized
with Remote Management by setting `DOCKER_STEPCA_INIT_REMOTE_MANAGEMENT`.
An ACME provisioner with default settings can be created at initialization
by setting `DOCKER_STEPCA_INIT_ACME`.
 2022-12-07 22:00:39 -07:00
Mariano Cano
18555a3cb2
Split build and download in Dockerfiles 
On systems with low resources the command `go mod download` can fail.
This causes long builds of the docker images. This change adds a new
layer in the docker build splitting the build and download in two
steps.

Fixes #1114
 2022-10-19 17:57:50 -07:00
Jakob Schlyter
c1425422dd include support for GCP and AWS KMS by default 2022-04-25 14:25:31 +02:00
Jakob Schlyter
df8eca2c19 space 2022-04-25 14:14:23 +02:00
Jakob Schlyter
66ba6048a4 start pcscd if installed 2022-04-24 11:08:51 +02:00
Jakob Schlyter
6ee48ca631 add pcsc-lite 2022-04-24 10:59:26 +02:00
Jakob Schlyter
221ced5c51 add Dockerfile for building with HSM support 2022-04-23 10:49:33 +02:00
Carl Tashian
f738cb43c3 Make the default provisioner name optional; change DNS names variable name 2021-08-18 13:37:58 -07:00
Carl Tashian
4e8e4c638e Add newline to password file for readabiliy 2021-08-18 12:50:14 -07:00
Carl Tashian
bc63829111 Auto-generate password by default 2021-08-18 11:11:05 -07:00
Carl Tashian
7ab26c8303 Auto-generate password by default 2021-08-18 11:09:26 -07:00
Carl Tashian
8d52379771 New Dockerfile with entrypoint script for easy CA init 2021-08-17 17:17:28 -07:00
Carl Tashian
3b31c6d2f5 Change HEALTHCHECK to use step ca health. Change shell CMD exec to skip redundant /bin/sh -c 2020-09-08 09:44:35 -07:00
Carl Tashian
6ffc438ed1 Update Dockerfile.step-ca to match best practices 
- See https://docs.docker.com/develop/develop-images/dockerfile_best-practices/
- Added a .dockerignore file to reduce the build context size
- Added a HEALTHCHECK (curl the CA)
 2020-09-02 11:41:47 -07:00
Carl Tashian
9815a38a2c Fixes #344; also gets docker buildx working on both darwin & linux 2020-08-12 19:50:47 -07:00
Moritz Marquardt
da18defd94 Let step-ca bind to ports < 1024 2020-02-06 12:35:40 +00:00
max furman
2871d0b68b bump Docker to latest tag 2019-05-08 12:26:21 -07:00
Mariano Cano
c099795122 Revert use latest version as it does not yet exists. 2019-03-28 11:28:39 -07:00
Mariano Cano
ce54927dab Use latest tag. 2019-03-27 12:02:27 -07:00
Mariano Cano
f1dacc6b57 Remove deprecated script. 2019-03-27 11:04:51 -07:00
Mariano Cano
b5d67ab129 Remove exposed port, it depends on the configuration. 2019-03-27 11:02:33 -07:00
Mariano Cano
1579a87cc6 Remove unnecessary file. 2019-03-27 10:49:46 -07:00
Mariano Cano
2f661c0941 Update docker images and add docs on how to run step-ca on docker. 
Fixes #48
 2019-03-26 19:00:13 -07:00
max furman
8402b06119 bump step-cli container version in step-ca Dockerfile 2019-01-16 16:40:13 -08:00
max furman
f7154a9ba3 add Makefile build and deploy docker image for step-ca 2018-11-18 15:35:47 -08:00