From 0f6df87ef1602a7a705693fff5b06c3feb4c438e Mon Sep 17 00:00:00 2001 From: Benoit de Chezelles Date: Wed, 29 Jan 2025 13:09:32 +0100 Subject: [PATCH] guides: Fix cert extension to be auto-added by update-ca-certificates --- content/guides/zscaler/index.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/content/guides/zscaler/index.md b/content/guides/zscaler/index.md index 56c35463d534..c6b7b32b2b01 100644 --- a/content/guides/zscaler/index.md +++ b/content/guides/zscaler/index.md @@ -84,13 +84,13 @@ like this: ```dockerfile FROM debian:bookworm -COPY zscaler-cert.pem /usr/local/share/ca-certificates/zscaler-cert.pem +COPY zscaler-root-ca.crt /usr/local/share/ca-certificates/zscaler-root-ca.crt RUN apt-get update && \ apt-get install -y ca-certificates && \ update-ca-certificates ``` -Here, `zscaler-cert.pem` is the root certificate, located at the root of the +Here, `zscaler-root-ca.crt` is the root certificate, located at the root of the build context (often within the application's Git repository). If you use an artifact repository, you can fetch the certificate directly using @@ -100,7 +100,7 @@ the content digest of the certificate is correct. ```dockerfile FROM debian:bookworm ADD --checksum=sha256:24454f830cdb571e2c4ad15481119c43b3cafd48dd869a9b2945d1036d1dc68d \ - https://artifacts.example/certs/zscaler-cert.pem /usr/local/share/ca-certificates/zscaler-cert.pem + https://artifacts.example/certs/zscaler-root-ca.crt /usr/local/share/ca-certificates/zscaler-root-ca.crt RUN apt-get update && \ apt-get install -y ca-certificates && \ update-ca-certificates @@ -123,7 +123,7 @@ RUN --mount=target=. cmake -B output/ FROM debian:bookworm-slim AS final ADD --checksum=sha256:24454f830cdb571e2c4ad15481119c43b3cafd48dd869a9b2945d1036d1dc68d \ - https://artifacts.example/certs/zscaler-cert.pem /usr/local/share/ca-certificates/zscaler-cert.pem + https://artifacts.example/certs/zscaler-root-ca.crt /usr/local/share/ca-certificates/zscaler-root-ca.crt RUN apt-get update && \ apt-get install -y ca-certificates && \ update-ca-certificates