Bitnami/containers
2
0
Fork 0
mirror of https://github.com/bitnami/containers.git synced 2026-08-08 12:08:25 +08:00
Code Issues Packages Projects Releases Wiki Activity

[bitnami/ejbca] Release 9.3.7-debian-12-r17 (#95413)

Browse Source 
Signed-off-by: Bitnami Bot <bitnami.bot@broadcom.com>
This commit is contained in:
Bitnami Bot
2026-07-10 20:39:15 +02:00
committed by GitHub
parent 57f6dc2bc3
commit 731ac1dcaf
8 changed files with 42 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bitnami/ejbca/9/debian-12/Dockerfile
+3 -3
View File
@@ -8,7 +8,7 @@ ARG JAVA_EXTRA_SECURITY_DIR="/bitnami/java/extra-security"
ARG TARGETARCH
LABEL org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \
org.opencontainers.image.created="2026-06-10T17:01:13Z" \
org.opencontainers.image.created="2026-07-10T17:54:20Z" \
org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/ejbca/README.md" \
org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/ejbca" \
@@ -29,7 +29,7 @@ RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \
DOWNLOADS_URL=${SECRET_DOWNLOADS_URL:-${DOWNLOADS_URL}} ; \
mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \
COMPONENTS=( \
"wildfly-32.0.1-28-linux-${OS_ARCH}-debian-12" \
"wildfly-32.0.1-32-linux-${OS_ARCH}-debian-12" \
"jre-21.0.11-11-1-linux-${OS_ARCH}-debian-12" \
"mysql-client-12.3.2-1-linux-${OS_ARCH}-debian-12" \
"ejbca-9.3.7-3-linux-${OS_ARCH}-debian-12" \
@@ -54,7 +54,7 @@ RUN /opt/bitnami/scripts/ejbca/postunpack.sh
RUN /opt/bitnami/scripts/java/postunpack.sh
ENV APP_VERSION="9.3.7" \
BITNAMI_APP_NAME="ejbca" \
IMAGE_REVISION="16" \
IMAGE_REVISION="17" \
JAVA_HOME="/opt/bitnami/java" \
PATH="/opt/bitnami/wildfly/bin:/opt/bitnami/java/bin:/opt/bitnami/mysql/bin:/opt/bitnami/ejbca/bin:$PATH"
bitnami/ejbca/9/debian-12/prebuildfs/opt/bitnami/checksums/wildfly-32.0.1-28-linux-amd64-debian-12.tar.gz.sha256
-1
View File
@@ -1 +0,0 @@
e77e90f1814ee1be763458a7a5c437629e1f4ca9d0393dd4c582447df4a67b0b wildfly-32.0.1-28-linux-amd64-debian-12.tar.gz
bitnami/ejbca/9/debian-12/prebuildfs/opt/bitnami/checksums/wildfly-32.0.1-28-linux-arm64-debian-12.tar.gz.sha256
-1
View File
@@ -1 +0,0 @@
f2fc0e94c0f0b6f8b155d3586dbdf9d13bfd5e4c8e2f2a1421b8215e537f71af wildfly-32.0.1-28-linux-arm64-debian-12.tar.gz
bitnami/ejbca/9/debian-12/prebuildfs/opt/bitnami/checksums/wildfly-32.0.1-32-linux-amd64-debian-12.tar.gz.sha256
+1
View File
@@ -0,0 +1 @@
3c96793392c7dc674826a8c74bede7242ec32cbc7f15a0275a45e96e46f47433 wildfly-32.0.1-32-linux-amd64-debian-12.tar.gz
bitnami/ejbca/9/debian-12/prebuildfs/opt/bitnami/checksums/wildfly-32.0.1-32-linux-arm64-debian-12.tar.gz.sha256
+1
View File
@@ -0,0 +1 @@
b8cf0d6b8fb09ff689d827d9c87d57533ce3c56b444a9e6d454c6c44c92ed807 wildfly-32.0.1-32-linux-arm64-debian-12.tar.gz
bitnami/ejbca/9/debian-12/prebuildfs/opt/bitnami/scripts/libpersistence.sh
+5 -5
View File
@@ -39,7 +39,7 @@ persist_app() {
fi
pushd "$install_dir" >/dev/null || exit
local file_to_persist_relative file_to_persist_destination file_to_persist_destination_folder
local -r tmp_file="/tmp/perms.acl"
local -r acl_file="$(mktemp "${TMPDIR:-/tmp}"/acl.XXXXXXXXXX)"
for file_to_persist in "${files_to_persist[@]}"; do
if [[ ! -f "$file_to_persist" && ! -d "$file_to_persist" ]]; then
error "Cannot persist '${file_to_persist}' because it does not exist"
@@ -50,22 +50,22 @@ persist_app() {
file_to_persist_destination_folder="$(dirname "$file_to_persist_destination")"
# Get original permissions for existing files, which will be applied later
# Exclude the root directory with 'sed', to avoid issues when copying the entirety of it to a volume
getfacl -R "$file_to_persist_relative" | sed -E '/# file: (\..+|[^.])/,$!d' > "$tmp_file"
getfacl -R "$file_to_persist_relative" | sed -E '/# file: (\..+|[^.])/,$!d' > "$acl_file"
# Copy directories to the volume
ensure_dir_exists "$file_to_persist_destination_folder"
cp -Lr --preserve=links "$file_to_persist_relative" "$file_to_persist_destination_folder"
# Restore permissions
pushd "$persist_dir" >/dev/null || exit
if am_i_root; then
setfacl --restore="$tmp_file"
setfacl --restore="$acl_file"
else
# When running as non-root, don't change ownership
setfacl --restore=<(grep -E -v '^# (owner|group):' "$tmp_file")
setfacl --restore=<(grep -E -v '^# (owner|group):' "$acl_file")
fi
popd >/dev/null || exit
done
popd >/dev/null || exit
rm -f "$tmp_file"
rm -f "$acl_file"
# Install the persisted files into the installation directory, via symlinks
restore_persisted_app "$@"
}
bitnami/ejbca/9/debian-12/prebuildfs/opt/bitnami/scripts/libservice.sh
+20
View File
@@ -424,3 +424,23 @@ EOF
WantedBy=bitnami.service
EOF
}
########################
# Register a SIGTERM handler that forwards the signal to all child processes.
# Should be called at the start of run.sh, before launching any background processes.
# Globals:
# None
# Arguments:
# None
# Returns:
# None
#########################
service_register_term_forwarder() {
_service_forward_term() {
warn "Caught signal SIGTERM, passing it to child processes..."
pgrep -P $$ | xargs kill -TERM 2>/dev/null
wait
exit $?
}
trap _service_forward_term TERM
}
bitnami/ejbca/9/debian-12/rootfs/opt/bitnami/scripts/libejbca.sh
+12 -4
View File
@@ -212,9 +212,15 @@ ejbca_configure_wildfly_https() {
ejbca_wildfly_command "/socket-binding-group=standard-sockets/socket-binding=httpspriv:add(port=\"$EJBCA_HTTPS_PORT_NUMBER\",interface=\"httpspriv\")"
info "Configure TLS"
ejbca_wildfly_command "/subsystem=elytron/key-store=httpsKS:add(path=\"keystore.jks\",relative-to=jboss.server.config.dir,credential-reference={clear-text=\"$EJBCA_KEYSTORE_PASSWORD\"},type=JKS)"
ejbca_wildfly_command "/subsystem=elytron/key-store=httpsTS:add(path=\"truststore.jks\",relative-to=jboss.server.config.dir,credential-reference={clear-text=\"$EJBCA_TRUSTSTORE_PASSWORD\"},type=JKS)"
ejbca_wildfly_command "/subsystem=elytron/key-manager=httpsKM:add(key-store=httpsKS,algorithm=\"SunX509\",credential-reference={clear-text=\"$EJBCA_KEYSTORE_PASSWORD\"})"
if [[ "${JAVA_FIPS_MODE:-}" == "restricted" ]]; then
ejbca_wildfly_command "/subsystem=elytron/key-store=httpsKS:add(path=\"keystore.p12\",relative-to=jboss.server.config.dir,credential-reference={clear-text=\"$EJBCA_KEYSTORE_PASSWORD\"},type=PKCS12)"
ejbca_wildfly_command "/subsystem=elytron/key-store=httpsTS:add(path=\"truststore.p12\",relative-to=jboss.server.config.dir,credential-reference={clear-text=\"$EJBCA_TRUSTSTORE_PASSWORD\"},type=PKCS12)"
ejbca_wildfly_command "/subsystem=elytron/key-manager=httpsKM:add(key-store=httpsKS,algorithm=\"PKIX\",credential-reference={clear-text=\"$EJBCA_KEYSTORE_PASSWORD\"})"
else
ejbca_wildfly_command "/subsystem=elytron/key-store=httpsKS:add(path=\"keystore.jks\",relative-to=jboss.server.config.dir,credential-reference={clear-text=\"$EJBCA_KEYSTORE_PASSWORD\"},type=JKS)"
ejbca_wildfly_command "/subsystem=elytron/key-store=httpsTS:add(path=\"truststore.jks\",relative-to=jboss.server.config.dir,credential-reference={clear-text=\"$EJBCA_TRUSTSTORE_PASSWORD\"},type=JKS)"
ejbca_wildfly_command "/subsystem=elytron/key-manager=httpsKM:add(key-store=httpsKS,algorithm=\"SunX509\",credential-reference={clear-text=\"$EJBCA_KEYSTORE_PASSWORD\"})"
fi
ejbca_wildfly_command '/subsystem=elytron/trust-manager=httpsTM:add(key-store=httpsTS)'
ejbca_wildfly_command '/subsystem=elytron/server-ssl-context=httpspub:add(key-manager=httpsKM,protocols=["TLSv1.2"])'
ejbca_wildfly_command '/subsystem=elytron/server-ssl-context=httpspriv:add(key-manager=httpsKM,protocols=["TLSv1.2"],trust-manager=httpsTM,need-client-auth=false,authentication-optional=true,want-client-auth=true)'
@@ -430,12 +436,14 @@ ejbca_generate_ca() {
fi
info "Add RA Entity"
local ra_token_type="JKS"
[[ "${JAVA_FIPS_MODE:-}" == "restricted" ]] && ra_token_type="PKCS12"
ejbca_execute_command ra addendentity \
--username "$end_entity_name" \
--dn "\"CN=$instance_hostname,$EJBCA_BASE_DN\"" \
--caname "$EJBCA_CA_NAME" \
--type 1 \
--token JKS \
--token "$ra_token_type" \
--password "$EJBCA_KEYSTORE_PASSWORD" \
--altname "dnsName=$instance_hostname" \
--certprofile SERVER