update documentation
This commit is contained in:
1 parent
e83c082b7c
commit
068681945c
1 file changed
+9
-7
@@ -22,7 +22,7 @@ The following is just an example of how your Dockerfile could look like.
|
|||||||
```sh
|
```sh
|
||||||
# Password for the certificate
|
# Password for the certificate
|
||||||
# this image contains the entire .NET SDK and is ideal for creation the build
|
# this image contains the entire .NET SDK and is ideal for creation the build
|
||||||
FROM mcr.microsoft.com/dotnet/sdk:9.0-alpine-amd64 AS build-env
|
FROM mcr.microsoft.com/dotnet/sdk:10.0-alpine-amd64 AS build-env
|
||||||
WORKDIR /App
|
WORKDIR /App
|
||||||
COPY . ./
|
COPY . ./
|
||||||
# Restore dependencies for your application
|
# Restore dependencies for your application
|
||||||
@@ -46,7 +46,7 @@ ENTRYPOINT ["dotnet", "test.dll"]
|
|||||||
|-----------------------------------------------------|-------------------------------------------------------------------------|----------------------------------------------------------------------------------------------|
|
|-----------------------------------------------------|-------------------------------------------------------------------------|----------------------------------------------------------------------------------------------|
|
||||||
| ASPNETCORE_Kestrel__Certificates__Default__Path | The path containing the server certificate | /usr/local/share/ca-certificates/aspnetapp.crt |
|
| ASPNETCORE_Kestrel__Certificates__Default__Path | The path containing the server certificate | /usr/local/share/ca-certificates/aspnetapp.crt |
|
||||||
| ASPNETCORE_Kestrel__Certificates__Default__KeyPath | The path containing the key for the server certificate | /usr/local/share/ca-certificates/aspnetapp.key |
|
| ASPNETCORE_Kestrel__Certificates__Default__KeyPath | The path containing the key for the server certificate | /usr/local/share/ca-certificates/aspnetapp.key |
|
||||||
| ASPNETCORE_Kestrel__Certificates__Default__Password | The password for required for the server key | N/A (generated at build time) |
|
| ASPNETCORE_Kestrel__Certificates__Default__Password | The password for required for the server key | N/A (generated at build time through CERT_PASSWORD argument) |
|
||||||
| CERTIFICATES_DIRECTORY | The directory where the certificate files are stored for the web server | /usr/local/share/ca-certificates |
|
| CERTIFICATES_DIRECTORY | The directory where the certificate files are stored for the web server | /usr/local/share/ca-certificates |
|
||||||
| ASPNETCORE_URLS | Specifies at which urls and ports the Kestrel server should listen | http://+:80;https://+:443 |
|
| ASPNETCORE_URLS | Specifies at which urls and ports the Kestrel server should listen | http://+:80;https://+:443 |
|
||||||
| DOTNET_CLI_TELEMETRY_OPTOUT | Disables telemetry | 1 |
|
| DOTNET_CLI_TELEMETRY_OPTOUT | Disables telemetry | 1 |
|
||||||
@@ -90,11 +90,13 @@ Depending on your use-case you event might consider to use docker networking in
|
|||||||
|
|
||||||
### Included certificate
|
### Included certificate
|
||||||
|
|
||||||
The included certificate is generated through the _dotnet dev-certs_ command. This is a very convenient and suitable way to generate development certificates through the dotnet SDK.
|
The included certificate is generated through the _dotnet dev-certs_ command. This is a very convenient and suitable way to generate development certificates using the .NET SDK.
|
||||||
|
|
||||||
|
The build pipeline generates a random certificate password using `openssl rand -base64 12` and passes it to the Docker build through the CERT_PASSWORD build argument. The password is therefore different for each pipeline build.
|
||||||
|
|
||||||
|
Because the password is embedded in the resulting image configuration, it can be retrieved by inspecting the image.
|
||||||
|
This is acceptable for development purposes but it is not suitable for production use.
|
||||||
|
|
||||||
The password used to generate the certificate is randomly generated through the `openssl rand -base64 12` at build time.
|
|
||||||
If you inspect the image layers you'll able to easily see it.
|
|
||||||
I think this is fine for development purposes and just want to get things up and running, although this is not recommended for production use at all.
|
|
||||||
You can generate your own password and certificates in the following way :
|
You can generate your own password and certificates in the following way :
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
@@ -103,7 +105,7 @@ openssl rand -base64 12
|
|||||||
# use the .net cli to generate your own certificates with your chosen password
|
# use the .net cli to generate your own certificates with your chosen password
|
||||||
dotnet dev-certs https --export-path /config/aspnetapp.pem --password "YOUR PASSWORD" --format PEM
|
dotnet dev-certs https --export-path /config/aspnetapp.pem --password "YOUR PASSWORD" --format PEM
|
||||||
```
|
```
|
||||||
After this you only need to map your own certificates with the **ASPNETCORE_Kestrel__Certificates__** variables.
|
Afterwards, configure your own certificate with the **ASPNETCORE_Kestrel__Certificates__** variables.
|
||||||
|
|
||||||
### Versioning
|
### Versioning
|
||||||
|
|
||||||
|
|||||||
Reference in new issue
Block a user