Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Generate self-signed certs/keys/keystores in pass-docker #1121

Open
rpoet-jh opened this issue Jan 29, 2025 · 0 comments
Open

Generate self-signed certs/keys/keystores in pass-docker #1121

rpoet-jh opened this issue Jan 29, 2025 · 0 comments
Assignees
Milestone

Comments

@rpoet-jh
Copy link
Contributor

What?

We should remove all the self-signed certificates, private keys, and keystores in pass-docker. These files should be generated and set when the containers starts.

Why?

To follow security best practices so that self-signed certs/keys/keystore don't accidentally get promoted to an actual runtime environment.

How?

Search for all cases, but at the time of writing this, the following containers configuration directories need to be changed:

  • idp
  • invenio-rdm
  • pass-core

Any containers that require self-signed certificates should be modified to execute a script to generate needed file on startup.

Acceptance Criteria

All self-signed certs/private keys/keystores are removed from pass-docker

@github-project-automation github-project-automation bot moved this to Backlog in Eclipse PASS Jan 29, 2025
@rpoet-jh rpoet-jh added this to the 1.15.0 milestone Jan 29, 2025
@dkriethof dkriethof moved this from Backlog to Ready for Development in Eclipse PASS Jan 29, 2025
@rpoet-jh rpoet-jh self-assigned this Jan 30, 2025
@rpoet-jh rpoet-jh moved this from Ready for Development to In Progress in Eclipse PASS Jan 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: In Progress
Development

No branches or pull requests

1 participant