GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Add keyUsage extension to dind generated CA cert · docker-library/docker@52c8bfa

File tree

Expand file treeCollapse file tree
Open diff view settings
Filter options
  • 28/dind
    • dockerd-entrypoint.sh
  • dockerd-entrypoint.sh
Expand file treeCollapse file tree
Open diff view settings
Collapse file

‎28/dind/dockerd-entrypoint.sh‎

Copy file name to clipboardExpand all lines: 28/dind/dockerd-entrypoint.sh
+4-1Lines changed: 4 additions & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Collapse file

‎dockerd-entrypoint.sh‎

Copy file name to clipboardExpand all lines: dockerd-entrypoint.sh
+4-1Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,10 @@ _tls_generate_certs() {
4141
_tls_ensure_private "$dir/ca/key.pem"
4242
openssl req -new -key "$dir/ca/key.pem" \
4343
-out "$dir/ca/cert.pem" \
44-
-subj '/CN=docker:dind CA' -x509 -days "$certValidDays"
44+
-subj '/CN=docker:dind CA' \
45+
-x509 \
46+
-days "$certValidDays" \
47+
-addext keyUsage=critical,digitalSignature,keyCertSign
4548
fi
4649

4750
if [ -s "$dir/ca/key.pem" ]; then

0 commit comments

Comments
0 (0)
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.