Remove certificates from base image

OpenConext · Dec 5, 2022 · a299d29 · a299d29
1 parent e9f04ec
commit a299d29
Show file tree

Hide file tree

Showing 8 changed files with 2 additions and 190 deletions.
diff --git a/docker/ssp-debug-sp/Dockerfile b/docker/ssp-debug-sp/Dockerfile
@@ -16,7 +16,6 @@ RUN git reset --hard adf1eb8
 COPY conf/config.php /app/config/config.php
 COPY conf/authsources.php /app/config/authsources.php
 COPY conf/accountgen.inc /app/config/accountgen.inc
-COPY certificates/* /app/cert/
 COPY conf/saml20-idp-hosted.php /app/metadata/saml20-idp-hosted.php
 COPY conf/saml20-idp-remote.php /app/metadata/saml20-idp-remote.php
 COPY conf/saml20-sp-remote.php /app/metadata/saml20-sp-remote.php

diff --git a/docker/ssp-debug-sp/certificates/idp.crt b/docker/ssp-debug-sp/certificates/idp.crt
diff --git a/docker/ssp-debug-sp/certificates/idp.key b/docker/ssp-debug-sp/certificates/idp.key
diff --git a/docker/ssp-debug-sp/certificates/sp.crt b/docker/ssp-debug-sp/certificates/sp.crt
diff --git a/docker/ssp-debug-sp/certificates/sp.key b/docker/ssp-debug-sp/certificates/sp.key
diff --git a/docker/ssp-debug-sp/certificates/ssp.crt b/docker/ssp-debug-sp/certificates/ssp.crt
diff --git a/docker/ssp-debug-sp/certificates/ssp.key b/docker/ssp-debug-sp/certificates/ssp.key
diff --git a/docker/ssp-debug-sp/conf/saml20-idp-remote.php b/docker/ssp-debug-sp/conf/saml20-idp-remote.php
@@ -69,7 +69,7 @@
                     'encryption' => false,
                     'signing' => true,
                     'type' => 'X509Certificate',
-                    'X509Certificate' => '{{ gateway_saml_idp_publickey | depem }}',
+                    'X509Certificate' => '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',
                 ),
         ),
 );
@@ -109,7 +109,7 @@
                     'encryption' => false,
                     'signing' => true,
                     'type' => 'X509Certificate',
-                    'X509Certificate' => '{{ gateway_saml_idp_publickey | depem }}',
+                    'X509Certificate' => 'MIIC5DCCAcwCCQCcDbxN/IogUjANBgkqhkiG9w0BAQsFADA0MRkwFwYDVQQDDBBHYXRld2F5IFNBTUwgSWRQMRcwFQYDVQQKDA5EZXZlbG9wbWVudCBWTTAeFw0xODA3MzAxMjMwNDdaFw0yMzA3MjkxMjMwNDdaMDQxGTAXBgNVBAMMEEdhdGV3YXkgU0FNTCBJZFAxFzAVBgNVBAoMDkRldmVsb3BtZW50IFZNMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrWJ6dKVau2rWfiMQ5EWuPxHabSskcQsXbwS/y35e8rFolNTZZ7zvHYF/0kJqhd31JTgtC92Yoflgpn3PNyjje1PKTe6+OA1/O+jN4eiKr1/GUVoVCdSAgEuioGGxRRCD0ykzT0cbpi4MEgNm1t4LCxPhyGdqp7/KhbpupKhpFpHT9CdL7+vH5y0r+FZZWxwoNTJNSY96UAt94F6bBC+pcgBYKaAtKvAN9wo7Cq9QkmESdIrWcthXJ4ThO1HrKpShTdfC/jfV5DEuvJgS3c7bYdWBKC+p/m8hJOrAz3DAhrg0Bxvv9PkkiXNwclVFVtZ6IcOSx5oP3SqancOD1vTDwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQCwn7Dj0ZK3B0xeQisCmFKYPXk5FZLeNF3TcmVz2TGx3seOMzBA89+aOr5uRWEP48+5XUjlXEhG188Vier+eWaoFqRlOnVIXwbMnZCIS6ekMHz/Dx1OLijxDUkzbn2HlsWTl4MoHovTEUgjZqp/tTCwWBfrRf5A2yHpEdCx57VqmBdHgeYSoeeXv5ADDMPDaLkiKBymXZMbwBPQ22zynPGZheMVQn5FnEw/l2Qe/RN61Bf9LAIxyVnqIiO9D0Gbvxo3w8nBiQAycqtXRWWRjoShDNaCA+vi4YdwHzIGqrQY9HHj+fj/ylDY7TQAPOZB3oOR1Ulf8IHmyhJbI8y3VWQB',
                 ),
         ),
 );