This is an old revision of the document!
Create own Certificate Authority with Step CA Docker image
Create directories to put docker files
mkdir -p /opt/step-ca/data chown 1000:1000 /opt/step-ca/data chmod 700 /opt/step-ca/data
docker run -it -v /opt/step-ca/data:/home/step smallstep/step-ca step ca init --acme
docker run -it -v /opt/step-ca/data:/home/step smallstep/step-ca bash echo -n "password" > secrets/password chmod 600 secrets/password
.
.
"authority": {
"provisioners": [
{
.
.
"encryptedKey": "<secret key already set by init>",
"claims": {
"minTLSCertDuration": "8760h0m0s",
"maxTLSCertDuration": "17520h0m0s",
"defaultTLSCertDuration": "8760h0m0s",
"enableSSHCA": false,
"disableRenewal": false,
"allowRenewalAfterExpiry": false
},
"options": {
"x509": {},
"ssh": {}
}
},
{
"type": "ACME",
"name": "heitmann",
"claims": {
"maxTLSCertDuration": "2160h0m0s",
"defaultTLSCertDuration": "2160h0m0s",
"enableSSHCA": true,
"disableRenewal": false,
"allowRenewalAfterExpiry": false
},
"options": {
"x509": {},
"ssh": {}
}
}
],
.
.