This image generates ca, server and client certificates for Docker Engine
mkdir certs
docker run --rm -v $PWD/certs:/certs -u $(id -u):$(id -g) javisabalete/docker-engine-tlsRSA: The key size to use. Default is4096.CA_EXPIRE_DAYS: This specifies the number of days to certify the CA certificate for. Default is 365 days.SERVER_EXPIRE_DAYS: This specifies the number of days to certify the SERVER certificate for. Default is 365 days.CLIENT_EXPIRE_DAYS: This specifies the number of days to certify the CLIENT certificate for. Default is 365 days.CA_C: The Country for CA cert. Default isUS.CA_ST: The State/Region for CA cert. Default isCoolState.CA_L: The City for CA cert. Default isNiceCity.CA_O: The Organization Name for CA cert. Default isDocker.CA_OU: The Organiza 6BBC tional Unit Name for CA cert. Default isDocker.CA_CN: The Common Name for CA cert. Default isDocker.SERVER: The server Common Name. Default isdocker.example.com.CLIENTS: The client Common Name. Default isDocker-Client.ALLOWED: Configure SAN. Default is `` (disabled).
docker run --rm -v $PWD/certs:/certs -u $(id -u):$(id -g) -e ALLOWED="DNS:docker.example.com,IP:1.2.3.4,IP:5.6.7.8" javisabalete/docker-engine-tlsdocker run --rm -v $PWD/certs:/certs -u $(id -u):$(id -g) -e RSA="8192" -e CA_L="Tarragona" javisabalete/docker-engine-tls