ergomentum/ca repository overview

⁠Ergomentum CA

Maintains a certification authority and issues client certificates with optional keys.

⁠Volumes

/etc/pki/CA

The Certificate Authority key and self signed certificate will be stored.

/etc/pki/tls/certs

The resulting certificates will be written to.

/etc/pki/tls/private

The resulting keys will be written to.

⁠Environment Variables

COUNTRY_NAME

Country name of the certificate subject. By default DE will be used.

STATE_OR_PROVINCE_NAME

State or province name of the certificate subject. By default Hamburg will be used.

LOCALITY_NAME

Locality name of the certificate subject. By default Hamburg will be used.

ORGANIZATION_NAME

Organization name of the certificate subject. By default Ergomentum will be used.

COMMON_NAME

Common name of the certificate subject. Should be accurately chosen.

⁠Exposed Ports

None.

⁠Configuration

None.

⁠Usage

Use this image to run a temporary container.

Generate CA key and self signed certificate:

./bin/ca -ca

Generate user key and certificate:

./bin/ca -c=<var>common_name</var>

The CA key and self signed certificate will be created implicitly if not exists.

Generate Diffie–Hellman parameter:

./bin/ca -dh

See Stackexchange⁠ for purpose.

Show subject of an existing certificate:

./bin/ca -s=<var>common_name</var>

⁠Contributing

To contribute a feature or a bugfix please open a pull request⁠ on GitHub⁠.

See CONTRIBUTING⁠ for details.

⁠License

See the LICENSE⁠ file for license rights and limitations (Apache License, Version 2.0).

⁠References

None.