rexypoo/openssl repository overview

⁠docker-openssl

A Docker build context to create a clean Docker image with OpenSSL⁠. The resulting files can be copied into another image to update OpenSSL⁠ or the image can be run from the command line⁠.

⁠Prerequisites

Docker⁠ 17.05+

⁠Usage

⁠Retrieving the Image

For basic usage fetch the image using the stable release of OpenSSL (1.1.1).

docker pull rexypoo/openssl:stable

⁠Running OpenSSL from the Command Line

You can run the basic command line interface for OpenSSL by running the image interactively:

docker run -it --rm rexypoo/openssl

You can also provide command line arguments to OpenSSL:

docker run -it --rm rexypoo/openssl genpkey -algorithm ed25519

See the Dockerfile labels related to org.label-schema.docker.cmd for more information.

⁠Updating OpenSSL in Docker Images

The OpenSSL binary compiled by this Dockerfile is statically linked such that you should be able to overwrite the existing binary as a layer of your Dockerfile build e.g.:

COPY --from=rexypoo/openssl:1.1.1-distroless /usr/local/bin/openssl </path/to/openssl>

Some features of OpenSSL cannot be statically linked and may not work with the above. In that case you'll need to copy the entire contents of /usr/local e.g.:

COPY --from=rexypoo/openssl:1.1.1 /usr/local /usr/local

You may need to adjust the $PATH environment variable in your image to prioritize the copy of OpenSSL at /usr/local/bin.

⁠License

This project is subject to the MIT license included in this repository.

The OpenSSL project is covered by one of two licenses⁠:

1. For releases below 3.0.0 the dual OpenSSL and SSLeay license⁠ applies.
2. For OpenSSL versions 3.0.0 and above the Apache License v2⁠ applies.

⁠Legal

Please be advised that cryptographic software may be illegal to export/import or use in some jurisdictions. The maintainer of this repository is not liable for any violations. Per the OpenSSL download webpage⁠: