diff --git a/Dockerfile b/Dockerfile index 9c8d814..43ca358 100644 --- a/Dockerfile +++ b/Dockerfile @@ -26,11 +26,21 @@ RUN curl -o /etc/yum.repos.d/security:shibboleth.repo \ && rm /etc/httpd/conf.d/ssl.conf \ && rm /etc/httpd/conf.d/userdir.conf \ && rm /etc/httpd/conf.d/welcome.conf + +# Add starters and installers +ADD ./container_files /opt COPY httpd-shib-foreground /usr/local/bin/ COPY conf/attribute-map.xml /opt/etc/shibboleth/attribute-map.xml COPY conf/inc-md-cert.pem /opt/etc/shibboleth/inc-md-cert.pem COPY conf/shibboleth_keygen.sh /opt/bin/shibboleth_keygen.sh +#Added ssl default conf +RUN ln -s /opt/etc/httpd/conf.d/ssl.conf /etc/httpd/conf.d/ssl.conf + +#Added shib module apache +RUN ln -s /opt/etc/httpd/conf.modules.d/00-shib.conf /etc/httpd/conf.modules.d/00-shib.conf +RUN ln -s /usr/lib64/shibboleth/mod_shib_24.so /etc/httpd/modules/mod_shib_24.so + EXPOSE 80 443 -CMD ["httpd-shib-foreground"] \ No newline at end of file +CMD ["httpd-shib-foreground"] diff --git a/container_files/etc/httpd/conf.d/ssl.conf b/container_files/etc/httpd/conf.d/ssl.conf new file mode 100644 index 0000000..ccc067c --- /dev/null +++ b/container_files/etc/httpd/conf.d/ssl.conf @@ -0,0 +1,6 @@ +SSLPassPhraseDialog exec:/usr/libexec/httpd-ssl-pass-dialog +SSLSessionCache shmcb:/run/httpd/sslcache(512000) +SSLSessionCacheTimeout 300 +SSLRandomSeed startup file:/dev/urandom 256 +SSLRandomSeed connect builtin +SSLCryptoDevice builtin diff --git a/container_files/etc/httpd/conf.modules.d/00-shib.conf b/container_files/etc/httpd/conf.modules.d/00-shib.conf new file mode 100644 index 0000000..0e5c7b2 --- /dev/null +++ b/container_files/etc/httpd/conf.modules.d/00-shib.conf @@ -0,0 +1 @@ +LoadModule mod_shib /usr/lib64/shibboleth/mod_shib_24.so