MISP / docker-misp

Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
BSD 3-Clause "New" or "Revised" License
105 stars 31 forks source link

Custom SSL certs #2

Closed ventz closed 5 years ago

ventz commented 5 years ago
Original reported by @cellango:

Docker container works great without certs.

#!/bin/bash
docker run -it -d 
-p 443:443 
-p 80:80 
-p 3306:3306 
-v /home/centos/docker/docker-misp/misp-db:/var/lib/mysql 
-v /home/centos/docker/docker-misp/certs:/etc/ssl/private 
harvarditsecurity/misp

misp.crt and misp.key file in /home/centos/docker/docker-misp/certs. Also put the org master and intermediate in /etc/pki/ca-trust/source/anchors. Is there a way to debug what is going on?

@cellango - When I test with generating custom certs:

openssl genrsa -out misp.key 2048
openssl req -new -x509 -key misp.key -out misp.crt -days 3650 -subj /CN=test-ssl-cert-for-misp

Which produces:

% ls
misp.crt  misp.key

Then running docker with:

docker run -it -d \
-p 443:443 -p 80:80 -p 3306:3306 \
-v /docker/misp/certs:/etc/ssl/private \
-v /docker/misp:/var/lib/mysql \
harvarditsecurity/misp

I do see the cert:

misp-cert

What problem are you seeing?

ventz commented 5 years ago

@cellango Just following up on this to make sure you are all set?