Howto migrating to docker

[JanKgh]

Hi all,

are there any howtos about migrating a existing installation with many CA's to a docker installation?
Connecting a external mariadb with a restored ejbca database is easy, but how to store the .properties?
How to connect a persistent volume to the right place?

thx
/jk

[primetomas]

There are some examples how to mount properties overrides and such in the GitHub ejbca-containers repo.
https://github.com/Keyfactor/ejbca-containers

[JanKgh]

thx tomas for the reply :)

i use docker-compose like this

version: '3'

services:
  ejbca:
    container_name: ejbca-app
    image: keyfactor/ejbca-ce:latest
    volumes:
      - ./conf:/etc/ejbca/conf:rw
      - ./conf:/etc/cesecore/conf:rw
    environment:
      - DATABASE_JDBC_URL=jdbc:mysql://10.10.1.20:3306/ejbca?characterEncoding=UTF-8
      - DATABASE_USER=ejbca
      - DATABASE_PASSWORD=****************
      - HTTPSERVER_HOSTNAME=carosi.delta.local
    ports:
      - 8080:8080
      - 8443:8443

I imported the db from old ejbca instance and put all .properties from old /opt/ejbca/conf in ./conf,
start the container and all old data are available. But where i have to put the certificate to avoid the generating a new cert?

--
Regards
/jk

[primetomas]

The WildFly TLS keystores are in /opt/wildfly/standalone/keystore. There should be two files, and they should be overrideable.

Anther option is to use an apache proxy front-end, there are example configuration for that.

[primetomas]

Ah, this thread gives a better answer:

https://sourceforge.net/p/ejbca/discussion/123123/thread/26ed044845/?limit=25

You could use a custom keystore by mounting an external JKS as

/mnt/secrets/tls/ks/server.jks
/mnt/secrets/tls/ks/server.storepasswd
/mnt/secrets/tls/ks/server.keypasswd