step_ca
Differences
This shows you the differences between two versions of the page.
| Next revision | Previous revision | ||
| step_ca [2025/08/03 08:33] – created herwarth | step_ca [2025/08/03 10:26] (current) – [Manual certificate creation] herwarth | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ====== Step CA ====== | + | ======Step CA Docker====== |
| + | =====Introduction===== | ||
| + | Create own Certificate Authority with Step CA Docker image | ||
| + | =====Installation===== | ||
| + | Create directories to put docker files | ||
| + | < | ||
| + | mkdir -p / | ||
| + | chown 1000:1000 / | ||
| + | chmod 700 / | ||
| + | </ | ||
| + | |||
| + | ====Initial config==== | ||
| + | | ||
| + | ====Create password file==== | ||
| + | < | ||
| + | docker run -it -v / | ||
| + | echo -n " | ||
| + | chmod 600 secrets/ | ||
| + | </ | ||
| + | |||
| + | ====Alter configfile==== | ||
| + | <code - / | ||
| + | . | ||
| + | . | ||
| + | " | ||
| + | " | ||
| + | { | ||
| + | . | ||
| + | . | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | }, | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | } | ||
| + | }, | ||
| + | { | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | }, | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | } | ||
| + | } | ||
| + | ], | ||
| + | . | ||
| + | . | ||
| + | </ | ||
| + | |||
| + | ====Compose file==== | ||
| + | <code - docker-compose.yml> | ||
| + | version: ' | ||
| + | services: | ||
| + | step-ca: | ||
| + | image: smallstep/ | ||
| + | container_name: | ||
| + | hostname: step-ca | ||
| + | restart: unless-stopped | ||
| + | ports: | ||
| + | - " | ||
| + | - " | ||
| + | volumes: | ||
| + | - ./ | ||
| + | networks: | ||
| + | - dmz | ||
| + | healthcheck: | ||
| + | test: [ " | ||
| + | timeout: 30s | ||
| + | interval: 10s | ||
| + | retries: 6 | ||
| + | |||
| + | networks: | ||
| + | dmz: | ||
| + | external: true | ||
| + | </ | ||
| + | |||
| + | ====Manual certificate creation==== | ||
| + | |||
| + | < | ||
| + | docker exec -ti step-ca bash | ||
| + | step certificate create nas.mgmt.internal certs/ | ||
| + | </ | ||
| + | |||
| {{tag> | {{tag> | ||
step_ca.1754209985.txt.gz · Last modified: by herwarth
Page Tools
