Trust letsencrypt CA (#23)

lehigh-university-libraries · May 19, 2024 · 225859e · 225859e
1 parent 53cac41
commit 225859e
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -2,11 +2,15 @@ FROM golang:1.22-alpine
 
 WORKDIR /app
 
+SHELL ["/bin/ash", "-o", "pipefail", "-c"]
+
 RUN apk update && \
     apk add --no-cache \
       curl==8.5.0-r0 \
       bash==5.2.21-r0 \
-      ca-certificates==20240226-r0 && \
+      ca-certificates==20240226-r0 \
+      openssl==3.1.4-r6 && \
+    openssl s_client -connect helloworld.letsencrypt.org:443 -showcerts </dev/null 2>/dev/null | sed -e '/-----BEGIN/,/-----END/!d' | tee "/usr/local/share/ca-certificates/letsencrypt.crt" >/dev/null && \
     update-ca-certificates
 
 COPY . ./