fixing ssl

.dockerignore

@@ -0,0 +1,8 @@
+.git
+.gitignore
+README.md
+README_AWS.md
+README_Ubuntu.md
+SECURITY.md
+privacy.md
+Architecture.md

.gitignore

@@ -5,7 +5,6 @@
 .crt
 .key
 .keypin
-/etc/CA/
 DB/*
 DB/webserver.sqlite
 server.crt
@@ -17,5 +16,3 @@ bin/db_builder.pyc
 samplelogs/
 etc/dshield.conf
 .DS_Store
-etc/CA
-/etc/openssl.cnf

Dockerfile

@@ -0,0 +1,8 @@
+FROM ubuntu:18.04
+WORKDIR /usr/src/dshield
+COPY . .
+CMD ["bin/install.sh"]
+EXPOSE 2223
+EXPOSE 2222
+EXPOSE 8000
+

etc/CA/ca.serial

@@ -0,0 +1 @@
+01

etc/CA/certs/.gitignore

@@ -0,0 +1,2 @@
+*
+!.gitignore

etc/CA/keys/.gitignore

@@ -0,0 +1,2 @@
+*
+!.gitignore

etc/CA/requests/.gitignore

@@ -0,0 +1,2 @@
+*
+!.gitignore

etc/openssl.cnf

@@ -0,0 +1,40 @@
+[ ca ]
+default_ca	= CA_default		# The default ca section
+
+[ CA_default ]
+
+dir = /home/pi/install/dshield/bin//../etc/CA
+certs		= $dir/certs		# Where the issued certs are kept
+crl_dir = $dir/crls
+database	= $dir/index.txt	# database index file.
+new_certs_dir   = $dir/certs
+certificate	= $dir/certs/dshieldca.crt
+serial		= $dir/ca.serial
+private_key	= $dir/keys/dshieldca.key
+x509_extensions	= usr_cert		# The extentions to add to the cert
+name_opt	= ca_default
+cert_opt	= ca_default
+default_days	= 3650
+default_crl_days = 30
+default_md	 = default
+preserve	 =no
+policy		 = signing_policy
+
+####################################################################
+[ signing_policy ]
+countryName     = optional
+stateOrProvinceName = optional
+localityName        = optional
+organizationName    = optional
+organizationalUnitName  = optional
+commonName      = supplied
+emailAddress        = optional
+
+####################################################################
+[ signing_req ]
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer
+
+basicConstraints = CA:FALSE
+keyUsage = digitalSignature, keyEncipherment
+