https://github.com/davidjenni/ca-dockerized

Private Certificate Authority running inside a docker container. Once root CA is initialized, use sub CA to routinetly issue TLS certificates.
https://github.com/davidjenni/ca-dockerized

Last synced: 6 days ago
JSON representation

Private Certificate Authority running inside a docker container. Once root CA is initialized, use sub CA to routinetly issue TLS certificates.

• Host: GitHub
• URL: https://github.com/davidjenni/ca-dockerized
• Owner: davidjenni
• License: mit
• Created: 2018-01-07T09:00:45.000Z (almost 7 years ago)
• Default Branch: master
• Last Pushed: 2018-01-16T07:53:01.000Z (almost 7 years ago)
• Last Synced: 2024-10-18T05:57:46.493Z (about 1 month ago)
• Language: JavaScript
• Size: 40 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# CA-Dockerized

Creates and runs a private Certificate Authority with a sub (intermediate) CA inside a docker container.

Use the sub-CA to create actual TLS certificates, either for server or client authentication.

The CA file artifacts (its database, public certs and private keys) are stored in docker volumes with different volume mounts

(e.g. private keys cans be stored on a separate USB key that can be locked away).

## CA Operations

- init:     initialize the root-CA

- new-sub:  create a new sub-CA

- serverCert:   create a new server certificate, signed by sub-CA

- clientCert:   create a new client certificate, signed by sub-CA

## File and Volume Layout

- /ca-app/certs         public certificates of root and sub CAs

- /ca-app/db/           certificate database, CRL and CA production files

- /secrets/rootCA       private keys for root CA

- /secrets/subCA        private keys for sub CAs

## Container

build:

```

docker build ca-app -t ca-dockerized

```

run interactively:

```

docker run --rm -it -v d:\Prj\ca-dockerized\loc\certs:/ca-app/certs -v ca-db:/ca-app/db ca-dockerized ash

```

## References:

- [Bulletproof SSL and TLS](https://www.feistyduck.com/books/bulletproof-ssl-and-tls/)

- [ivanr/bulletproof-tls](https://github.com/ivanr/bulletproof-tls/tree/master/private-ca)