Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2024-12-29 04:49:44 +01:00
Code Issues Packages Projects Releases Wiki Activity

0-RTT dockerfile script for nginx

Browse Source
This commit is contained in:
Dirk Wetter 2019-10-02 17:52:34 +02:00 committed by GitHub
parent fe43d9dd0c
commit bcc1298eb3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 55 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

55
utils/docker-nginx.tls13-earlydata.start.sh Normal file
View File

@ -0,0 +1,55 @@
#!/bin/bash
image="rsnow/nginx"
docker pull $image
ID=$(docker run -d -ti $image)
echo $ID
docker exec -ti $ID nginx -V
docker exec -ti $ID mkdir /etc/nginx/ssl
HN=$(docker exec -ti $ID hostname| tr -d '\n' | tr -d '\r')
cd /tmp
cat >$ID.conf << EOF
server {
listen 443 ssl default_server;
listen [::]:443 ssl default_server;
server_name _;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_early_data on;
#
ssl_certificate /etc/nginx/ssl/$HN.crt;
ssl_certificate_key /etc/nginx/ssl/$HN.key;
location / {
root /usr/share/nginx/html;
index index.html index.htm;
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
}
}
EOF
docker cp $ID.conf $ID:/etc/nginx/conf.d/443.conf
C_ST_etc="C=DE/ST=Gotham/L=Nowhere/CN=${HN}"
openssl req -subj "/${C_ST_etc}/CN=${HN}" -newkey rsa:4096 -keyout "$HN.key" -nodes -sha256 -out "$HN.req"
openssl x509 -days 365 -in "$HN.req" -req -signkey "$HN.key" -out "$HN.crt"
docker cp $HN.key $ID:/etc/nginx/ssl
docker cp $HN.crt $ID:/etc/nginx/ssl
docker exec -ti $ID nginx -s reload
# docker start $ID
# P Q
docker inspect $ID | jq -r '.[].NetworkSettings.IPAddress'
exit 0
EOF