Commits on Jan 25, 2024

1. Fix docker-compose service order …

   Without this change, when Fulcio is run in docker-compose, signing an
   artifact may fail with the error "Error entering certificate in CTL".
   This happens if the docker-compose service have been run previously on
   the host and the ctfeConfig volume is populated from the last run, so
   it would generally only be seen in a developer environment. The error
   happens because the ctfe_init container starts too soon, and ct_server
   starts with Fulcio's ephemeral root CA from the last run, which is now
   the wrong CA. This change fixes the issue by ensuring ct_server only
   starts after ctfe_init has exited successfully, instead of just after it
   is started. This also means that Fulcio needs to be one of the first
   services to start so that it can make the ephemeral CA available to
   download.
   
   Signed-off-by: Colleen Murphy <colleenmurphy@google.com>

   

   cmurphy committed Jan 25, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for bcbf96a
   • Browse repository at this point

   Copy the full SHA

   bcbf96a View commit details

   Browse the repository at this point in the history