Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix broken create_server_certificate.sh #1619

Merged
merged 1 commit into from
May 11, 2021

Conversation

alekna
Copy link
Contributor

@alekna alekna commented May 11, 2021

Docker image nginx:1.14.1 has no openssl installed. Therefore upgrading to nginx:1.19.10.

Before:

$ test/certs/create_server_certificate.sh web.nginx-proxy.tld
Unable to find image 'nginx:1.14.1' locally
1.14.1: Pulling from library/nginx
a5a6f2f73cd8: Pulling fs layer
2343eb083a4e: Pulling fs layer
251439d5b33c: Pulling fs layer
251439d5b33c: Verifying Checksum
251439d5b33c: Download complete
a5a6f2f73cd8: Verifying Checksum
a5a6f2f73cd8: Download complete
2343eb083a4e: Verifying Checksum
2343eb083a4e: Download complete
a5a6f2f73cd8: Pull complete
2343eb083a4e: Pull complete
251439d5b33c: Pull complete
Digest: sha256:32fdf92b4e986e109e4db0865758020cb0c3b70d6ba80d02fe87bad5cc3dc228
Status: Downloaded newer image for nginx:1.14.1

> Create a host key: /home/lauris/git/nginx-proxy/test/certs/web.nginx-proxy.tld.key
OCI runtime exec failed: exec failed: container_linux.go:367: starting container process caused: exec: "openssl": executable file not found in $PATH: unknown

> Create a host certificate signing request
OCI runtime exec failed: exec failed: container_linux.go:367: starting container process caused: exec: "openssl": executable file not found in $PATH: unknown

ERROR: failed to generate server certificate signing request
5277f33ba1df12112c6e3b3dda985f01f0e6a1c267fda22424df2f21071fa070

After:

$ test/certs/create_server_certificate.sh web.nginx-proxy.tld
Unable to find image 'nginx:1.19.10' locally
1.19.10: Pulling from library/nginx
Digest: sha256:75a55d33ecc73c2a242450a9f1cc858499d468f077ea942867e662c247b5e412
Status: Downloaded newer image for nginx:1.19.10

> Create a host key: /home/lauris/git/nginx-proxy/test/certs/web.nginx-proxy.tld.key
Generating RSA private key, 2048 bit long modulus (2 primes)
..................+++++
...............+++++
e is 65537 (0x010001)

> Create a host certificate signing request
Ignoring -days; not generating a certificate

> Create server certificate: /home/lauris/git/nginx-proxy/test/certs/web.nginx-proxy.tld.crt
Using configuration from /ca/openssl.cnf
Check that the request matches the signature
Signature ok
Certificate Details:
        Serial Number: 4096 (0x1000)
        Validity
            Not Before: May 11 09:33:10 2021 GMT
            Not After : Sep 26 09:33:10 2048 GMT
        Subject:
            commonName                = web.nginx-proxy.tld
        X509v3 extensions:
            X509v3 Subject Alternative Name: 
                DNS:web.nginx-proxy.tld
Certificate is to be certified until Sep 26 09:33:10 2048 GMT (10000 days)

Write out database with 1 new entries
Data Base Updated

Docker image nginx:1.14.1 has no openssl installed. Therefore upgrading to nginx:1.19.10
@alekna
Copy link
Contributor Author

alekna commented May 11, 2021

ping @buchdag

@buchdag buchdag added the type/test PR that add missing tests or correct existing tests label May 11, 2021
@buchdag buchdag merged commit 5bcb77c into nginx-proxy:main May 11, 2021
@alekna alekna deleted the create_server_certificate branch May 17, 2023 10:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type/test PR that add missing tests or correct existing tests
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants