ldap docker image: provide script to replace references to ENV variables for keystore configuration

[gunterze]

The default configuration of used TLS key and trust stores for the archive device:

dn: dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4che,dc=org
dcmKeyStoreURL: file://${env.KEYSTORE}
dcmKeyStoreType: ${env.KEYSTORE_TYPE}
dcmKeyStorePin: ${env.KEYSTORE_PASSWORD}
dcmKeyStoreKeyPin: ${env.KEY_PASSWORD}
dcmTrustStoreURL: file://${env.TRUSTSTORE}
dcmTrustStorePin: ${env.TRUSTSTORE_PASSWORD}

relies on environment variables resolvable by the archive. By running the docker image of the archive, these environment variables are initialized to sensible defaults:

ENV variable	default value
KEYSTORE	/opt/keycloak/standalone/configuration/keystore/key.jks
KEYSTORE_TYPE	JKS
KEYSTORE_PASSWORD	secret
KEY_PASSWORD	secret
TRUSTSTORE	/opt/keycloak/standalone/configuration/keystore/cacerts.jks
TRUSTSTORE_PASSWORD	secret

If you install Wildfly and deploy the archive yourself, not using the provided docker image for the archive, but using the docker image for ldap, you will have to

• either take care to set these envirionment variables yourself with appropriate values
• or replace the references to ENV variables for keystore configuration in the LDAP configuration for the archive device.

To facilitate the second, a script rmenv is provided in the ldap docker image to apply:

version: 1

dn: dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4che,dc=org
changetype: modify
replace: dcmTrustStoreURL
dcmTrustStoreURL: ${jboss.server.config.url}/keystores/cacerts.jks
-
replace: dcmTrustStorePin
dcmTrustStorePin: secret
-
replace: dcmKeyStoreURL
dcmKeyStoreURL: ${jboss.server.config.url}/keystores/key.jks
-
replace: dcmKeyStoreType
dcmKeyStoreType: JKS
-
replace: dcmKeyStorePin
dcmKeyStorePin: secret
-
replace: dcmKeyStoreKeyPin
dcmKeyStoreKeyPin: secret

Usage

$ docker exec <ldap-container-name> rmenv
modifying entry "dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4che,dc=org"