ENH: make cert in docker

linkahead/Makefile

@@ -8,4 +8,5 @@ stop:
 	docker compose rm -vsf
 
 cert: .env
-	./cert.sh
+	rm -r cert || true
+	docker run -e CERT_OWNER=$$UID -v./:/run/ -w /run eclipse-temurin:21 /run/cert.sh

linkahead/cert.sh

-#!/bin/sh
+#!/bin/bash
 
 source .env
 export KEYPW="$CERTIFICATES_KEY_PASSWORD"
@@ -6,7 +6,7 @@ export DOIP_SERVICE_ID="${DOIP_SERVICE_ID/\//\\/}"
 export DNS_HOST_NAME
 
 mkdir -p cert
-cd cert
+pushd cert
 
 # create encrypted private key
 openssl genrsa -aes256 -out key.pem -passout env:KEYPW 2048
@@ -23,4 +23,7 @@ openssl pkcs12 -export -inkey key.pem -in cert.pem -out cert.pkcs12 -passin env:
 # convert pkcs12 store to java keystore
 keytool -importkeystore -srckeystore cert.pkcs12 -srcstoretype PKCS12 -deststoretype pkcs12 -destkeystore keystore.jks -srcstorepass "${KEYPW}" -destkeypass "${KEYPW}" -deststorepass "${KEYPW}"
 
-cd ../
+popd
+if [ -n "$CERT_OWNER" ] ; then
+    chown -R "$CERT_OWNER:$CERT_OWNER" cert
+fi