Loading capif_backend/Dockerfile +0 −2 Original line number Diff line number Diff line Loading @@ -15,5 +15,3 @@ RUN apk add redis COPY . /usr/src/app EXPOSE 8080 CMD ["sh", "backoffice_prepare.sh"] capif_backend/backoffice_prepare.shdeleted 100755 → 0 +0 −64 Original line number Diff line number Diff line #!/bin/bash # OUTPUT=$(redis-cli -h redis -p 6379 -n 1 GET server_priv_key) # echo "$OUTPUT" # if [ -z "$OUTPUT" ]; then # echo "OUTPUT empty" # exit 1; # else # echo "OUTPUT: $OUTPUT" # redis-cli -h redis -p 6379 -n 1 GET server_priv_key > /usr/src/app/backoffice_service/server.key # fi pwd=$(pwd) openssl req -x509 \ -sha256 -days 356 \ -nodes \ -newkey rsa:2048 \ -subj "/CN=backoffice/C=ES/L=Madrid" \ -keyout $pwd/backoffice_service/certs/backofficeCA.key -out $pwd/backoffice_service/certs/backofficeCA.crt openssl genrsa -out $pwd/backoffice_service/certs/backoffice_key.key 2048 COUNTRY="ES" # 2 letter country-code STATE="Madrid" # state or province name LOCALITY="Madrid" # Locality Name (e.g. city) ORGNAME="Telefonica I+D" # Organization Name (eg, company) ORGUNIT="Innovation" # Organizational Unit Name (eg. section) COMMONNAME="superadmin" EMAIL="inno@tid.es" # certificate's email address # optional extra details CHALLENGE="" # challenge password COMPANY="" # company name # DAYS="-days 365" # create the certificate request cat <<__EOF__ | openssl req -new $DAYS -key $pwd/backoffice_service/certs/backoffice_key.key -out $pwd/backoffice_service/certs/backoffice.csr $COUNTRY $STATE $LOCALITY $ORGNAME $ORGUNIT $COMMONNAME $EMAIL $CHALLENGE $COMPANY __EOF__ openssl x509 -req -in $pwd/backoffice_service/certs/backoffice.csr -CA $pwd/backoffice_service/certs/backofficeCA.crt -CAkey $pwd/backoffice_service/certs/backofficeCA.key -CAcreateserial -out $pwd/backoffice_service/certs/backoffice_cert.crt -days 365 -sha256 VAULT_ADDR="http://$VAULT_HOSTNAME:$VAULT_PORT" VAULT_TOKEN=$VAULT_ACCESS_TOKEN curl -k -retry 30 \ --retry-all-errors \ --connect-timeout 5 \ --max-time 10 \ --retry-delay 10 \ --retry-max-time 300 \ --header "X-Vault-Token: $VAULT_TOKEN" \ --request GET "$VAULT_ADDR/v1/secret/data/ca" 2>/dev/null | jq -r '.data.data.ca' -j > ./backoffice_service/certs/ca.crt cd /usr/src/app/ python3 -m backoffice_service No newline at end of file Loading
capif_backend/Dockerfile +0 −2 Original line number Diff line number Diff line Loading @@ -15,5 +15,3 @@ RUN apk add redis COPY . /usr/src/app EXPOSE 8080 CMD ["sh", "backoffice_prepare.sh"]
capif_backend/backoffice_prepare.shdeleted 100755 → 0 +0 −64 Original line number Diff line number Diff line #!/bin/bash # OUTPUT=$(redis-cli -h redis -p 6379 -n 1 GET server_priv_key) # echo "$OUTPUT" # if [ -z "$OUTPUT" ]; then # echo "OUTPUT empty" # exit 1; # else # echo "OUTPUT: $OUTPUT" # redis-cli -h redis -p 6379 -n 1 GET server_priv_key > /usr/src/app/backoffice_service/server.key # fi pwd=$(pwd) openssl req -x509 \ -sha256 -days 356 \ -nodes \ -newkey rsa:2048 \ -subj "/CN=backoffice/C=ES/L=Madrid" \ -keyout $pwd/backoffice_service/certs/backofficeCA.key -out $pwd/backoffice_service/certs/backofficeCA.crt openssl genrsa -out $pwd/backoffice_service/certs/backoffice_key.key 2048 COUNTRY="ES" # 2 letter country-code STATE="Madrid" # state or province name LOCALITY="Madrid" # Locality Name (e.g. city) ORGNAME="Telefonica I+D" # Organization Name (eg, company) ORGUNIT="Innovation" # Organizational Unit Name (eg. section) COMMONNAME="superadmin" EMAIL="inno@tid.es" # certificate's email address # optional extra details CHALLENGE="" # challenge password COMPANY="" # company name # DAYS="-days 365" # create the certificate request cat <<__EOF__ | openssl req -new $DAYS -key $pwd/backoffice_service/certs/backoffice_key.key -out $pwd/backoffice_service/certs/backoffice.csr $COUNTRY $STATE $LOCALITY $ORGNAME $ORGUNIT $COMMONNAME $EMAIL $CHALLENGE $COMPANY __EOF__ openssl x509 -req -in $pwd/backoffice_service/certs/backoffice.csr -CA $pwd/backoffice_service/certs/backofficeCA.crt -CAkey $pwd/backoffice_service/certs/backofficeCA.key -CAcreateserial -out $pwd/backoffice_service/certs/backoffice_cert.crt -days 365 -sha256 VAULT_ADDR="http://$VAULT_HOSTNAME:$VAULT_PORT" VAULT_TOKEN=$VAULT_ACCESS_TOKEN curl -k -retry 30 \ --retry-all-errors \ --connect-timeout 5 \ --max-time 10 \ --retry-delay 10 \ --retry-max-time 300 \ --header "X-Vault-Token: $VAULT_TOKEN" \ --request GET "$VAULT_ADDR/v1/secret/data/ca" 2>/dev/null | jq -r '.data.data.ca' -j > ./backoffice_service/certs/ca.crt cd /usr/src/app/ python3 -m backoffice_service No newline at end of file