WIP: pipeline

.docker/cert.sh

@@ -40,6 +40,9 @@ function cert() {
     # NOTE: KEYPW and KEYSTOREPW are the same, due to Java limitations.
     KEYPW="${KEYPW}" openssl genrsa -aes256 -out caosdb.key.pem \
          -passout env:KEYPW 2048
+    # also store in pkcs format
+    KEYPW="${KEYPW}" openssl pkcs8 -topk8 -in caosdb.key.pem
+         -out caosdb.key.pk8 -passin env:KEYPW -passout env:KEYPW
     # Certificate is for localhost
     KEYPW="${KEYPW}" openssl req -new -x509 -key caosdb.key.pem \
          -out caosdb.cert.pem -passin env:KEYPW \

.docker/docker-compose.yml

@@ -36,7 +36,7 @@ services:
       DEBUG: 1
       CAOSDB_CONFIG_AUTHTOKEN_CONFIG: "conf/core/authtoken.example.yaml"
       CAOSDB_CONFIG_GRPC_SERVER_CA_PUB_PEM: /opt/caosdb/cert/caosdb.cert.pem
-      CAOSDB_CONFIG_GRPC_SERVER_CA_PRIV_PEM: /opt/caosdb/cert/caosdb.key.pem
+      CAOSDB_CONFIG_GRPC_SERVER_CA_PRIV_PEM: /opt/caosdb/cert/caosdb.key.pk8
       CAOSDB_CONFIG_GRPC_SERVER_CA_PW: CaosDBSecret
 volumes:
   scripting: