nano add_certs.sh
#!/bin/bash
#
if [ -z "$1" ]; then
echo "provide a domain as an argument"
exit;
fi
d=`date +%Y-%m-%d`
p=~/$1$d.pem
f=~/$1$d.cer
touch $f
touch $p
# path added -- brew openssl....
# echo 'export PATH="/usr/local/opt/openssl@1.1/bin:$PATH"' >> ~/.zshrc
# get pem file
openssl s_client -showcerts -connect "$1:443" -servername $1 </dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' >$
# https://stackoverflow.com/questions/13732826/convert-pem-to-crt-and-key
openssl x509 -inform PEM -in $p -outform DER -out $f
echo "new certificate"
./add_certs.sh www.googleapis.com
https://github.com/moby/moby/issues/8849
https://stackoverflow.com/questions/57328079/how-to-run-sh-file-when-container-is-running-using-dockerfile
https://gist.github.com/Artistan/5219484efb2fe51cd064175b3d0d5971
https://stackoverflow.com/questions/50768317/docker-pull-certificate-signed-by-unknown-authority
https://github.com/moby/moby/issues/8849
https://curl.haxx.se/docs/caextract.html
https://stackoverflow.com/questions/44047315/generate-a-self-signed-certificate-in-docker
http://notepad2.blogspot.com/2012/04/import-gmail-certificate-into-java.html
https://coderanch.com/t/587743/engineering/SSL-Exception
https://mkyong.com/webservices/jax-ws/suncertpathbuilderexception-unable-to-find-valid-certification-path-to-requested-target/
https://code.google.com/archive/p/openssl-for-windows/downloads
https://wolfpaulus.com/java/tomcat-multiple-ssl-certificates/
Full Stack Developer, DevOps, CSM e LKU. coutoarmando@gmail.com