OpenLiberty / OpenLiberty/ci.docker
Support importing additional certificates into the truststore
Nobody has claimed this yet.
- Dominant language
- Shell
- Stars
- 48
- Forks
- 60
- Avg merge
- 3h 2m
- Merged PRs (30d)
- 3
Description
Consider allowing users to import one or more certificates into the truststore only. The default location should be customizable by the user by an environment variable (i.e. TRUSTED_CERTS_DIR).
Note: At the moment, Liberty official images support importing CA cert (ca.crt) into the truststore as part of the manage TLS support, but requires tls.key and tls.crt to be specified. This option would provide flexibility to import certs into truststore only without having to provide tls.key and tls.crt.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by inspecting the existing manage TLS support that imports ca.crt into the truststore, then trace how tls.key and tls.crt are currently required. Define the behavior for importing one or more certificates without those files, including the TRUSTED_CERTS_DIR environment variable, and verify it against the official image workflow.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker, shell
- Domain
- devops
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100