47 Commits (de45d66cdb16bf8fecd443496b736a88c70c11c4)

Author	SHA1	Message	Date
Mariano Cano	875512c79e	Use the same version for building and running ... This commit makes sure to use the same version for building step-ca with CGO and running it. Fixes #1611	11 months ago
Carl Tashian	73cb04318a	Trying a different approach	1 year ago
francescocapuano	7f54153a1b	Add DOCKER_STEPCA_INIT_PASSWORD_FILE variable for docker secrets ... Add the management of the DOCKER_STEPCA_INIT_PASSWORD_FILE variable. over DOCKER_STEPCA_INIT_PASSWORD. If both are used only DOCKER_STEPCA_INIT_PASSWORD_FILE will be used.	1 year ago
Carl Tashian	df2909e712	Further docker simplifications	2 years ago
Carl Tashian	25e35aa0ad	Small dockerfile refactor	2 years ago
Carl Tashian	b92f37a61d	Use cloud tag on step-kms-plugin	2 years ago
Carl Tashian	4378300c80	Update cache before installing packages	2 years ago
Carl Tashian	79b3924322	Fix docker tags	2 years ago
Carl Tashian	12d8ca526a	Update Dockerfile.hsm to use debian:bullseye base image	2 years ago
Michel Jung	ebe7e5d019	Add DOCKER_STEPCA_INIT_ADDRESS ... This allows configuring "--address" instead of using hard-coded :9000	2 years ago
Mariano Cano	3b1be62663	Add step-kms-plugin to docker images and build a CGO based one	2 years ago
Mariano Cano	39f46d31b9	Remove deprecated binaries ... This commit removes the following deprecated binaries: - step-awskms-init - step-cloudkms-init - step-pkcs11-init - step-yubikey-init From now on step and step-kms-plugin should be used to initialize the PKI in AWS KMS, GCP KMS, PKCS#11 modules or YubiKeys. A future commit will add step-kms-plugin to the docker images of step-ca. Fixes #1046	2 years ago
Carl Tashian	2ab9483952	Only pass --admin-subject if --remote-management is true; fix overall boolean handling	2 years ago
Carl Tashian	dc8b196823	Print admin username and pw after init	2 years ago
Carl Tashian	328276eaeb	Shred provisioner password	2 years ago
Carl Tashian	ad5cbd9a0e	Print and delete provisioner password on setup	2 years ago
Carl Tashian	a017238874	No need for PROVISIONER_PWDPATH	2 years ago
Carl Tashian	313bf2354b	Check for existance of pwdpath before copying	2 years ago
Carl Tashian	640bd0b7c7	Tabs to spaces	2 years ago
Carl Tashian	c836c7ab40	Backward compatibility	2 years ago
Carl Tashian	8242895909	Update hsm dockerfile as well	2 years ago
Carl Tashian	844cfd3bad	Generate and use independent provisioner and private key passwords	2 years ago
Herman Slatman	4e3a6e67f1	Add env vars for enabling Remote Management and ACME provisioner. ... A `step-ca` instance created in a container can now be initialized with Remote Management by setting `DOCKER_STEPCA_INIT_REMOTE_MANAGEMENT`. An ACME provisioner with default settings can be created at initialization by setting `DOCKER_STEPCA_INIT_ACME`.	2 years ago
Mariano Cano	18555a3cb2	Split build and download in Dockerfiles ... On systems with low resources the command `go mod download` can fail. This causes long builds of the docker images. This change adds a new layer in the docker build splitting the build and download in two steps. Fixes #1114	2 years ago
Jakob Schlyter	c1425422dd	include support for GCP and AWS KMS by default	2 years ago
Jakob Schlyter	df8eca2c19	space	2 years ago
Jakob Schlyter	66ba6048a4	start pcscd if installed	2 years ago
Jakob Schlyter	6ee48ca631	add pcsc-lite	2 years ago
Jakob Schlyter	221ced5c51	add Dockerfile for building with HSM support	2 years ago
Carl Tashian	f738cb43c3	Make the default provisioner name optional; change DNS names variable name	3 years ago
Carl Tashian	4e8e4c638e	Add newline to password file for readabiliy	3 years ago
Carl Tashian	bc63829111	Auto-generate password by default	3 years ago
Carl Tashian	7ab26c8303	Auto-generate password by default	3 years ago
Carl Tashian	8d52379771	New Dockerfile with entrypoint script for easy CA init	3 years ago
Carl Tashian	3b31c6d2f5	Change `HEALTHCHECK` to use `step ca health`. Change shell `CMD exec` to skip redundant `/bin/sh -c`	4 years ago
Carl Tashian	6ffc438ed1	Update Dockerfile.step-ca to match best practices ... - See https://docs.docker.com/develop/develop-images/dockerfile_best-practices/ - Added a .dockerignore file to reduce the build context size - Added a HEALTHCHECK (curl the CA)	4 years ago
Carl Tashian	9815a38a2c	Fixes #344; also gets docker buildx working on both darwin & linux	4 years ago
Moritz Marquardt	da18defd94	Let step-ca bind to ports < 1024	5 years ago
max furman	2871d0b68b	bump Docker to latest tag	5 years ago
Mariano Cano	c099795122	Revert use latest version as it does not yet exists.	6 years ago
Mariano Cano	ce54927dab	Use latest tag.	6 years ago
Mariano Cano	f1dacc6b57	Remove deprecated script.	6 years ago
Mariano Cano	b5d67ab129	Remove exposed port, it depends on the configuration.	6 years ago
Mariano Cano	1579a87cc6	Remove unnecessary file.	6 years ago
Mariano Cano	2f661c0941	Update docker images and add docs on how to run step-ca on docker. ... Fixes #48	6 years ago
max furman	8402b06119	bump step-cli container version in step-ca Dockerfile	6 years ago
max furman	f7154a9ba3	add Makefile build and deploy docker image for step-ca	6 years ago