diff --git a/openvas-greenbone-deployment-full-guide/environment-variables.md b/openvas-greenbone-deployment-full-guide/environment-variables.md index d7d1ec4..b2fa313 100644 --- a/openvas-greenbone-deployment-full-guide/environment-variables.md +++ b/openvas-greenbone-deployment-full-guide/environment-variables.md @@ -15,4 +15,6 @@ These settings can be set in the docker command line with the --env parameter, o | SMTPPORT | The TCP port for the RELAYHOST | 25 | | AUTO_SYNC | Synchronize definitions automatically on start up | true | | HTTPS | Use HTTPS for the web interface. Use HTTP if false | true | +| CERTIFICATE | Use the Path to your SSL-Certificate | none | +| CERTIFICATE_KEY | Use the Path to your SSL-Certificate Private Key | none | | OPT_PDF | Install deps for PDF Reports (texlive) on firststart | 0 | diff --git a/openvas-greenbone-deployment-full-guide/faq.md b/openvas-greenbone-deployment-full-guide/faq.md index 0f1bd15..6f61170 100644 --- a/openvas-greenbone-deployment-full-guide/faq.md +++ b/openvas-greenbone-deployment-full-guide/faq.md @@ -124,7 +124,27 @@ gvmd –-delete-user=MyUser2 --inheritor=MyUser Ensuring you take note of the password for the 2nd create user +### Question 8 - How can I use my own SSL Certificate? +#### Solution 1 + +You can build your own image: +``` +FROM securecompliance/gvm:latest +ENV HTTPS=true \ + CERTIFICATE=/etc/ssl/cert/MY_SSL_CERT.pem \ + CERTIFICATE_KEY=/etc/ssl/private/MY_SSL_CERT.key +COPY ./ssl/MY_SSL_CERT.pem /etc/ssl/cert/MY_SSL_CERT.pem +COPY ./ssl/MY_SSL_CERT.key /etc/ssl/private/MY_SSL_CERT.key +RUN chmod 0644 /etc/ssl/cert/MY_SSL_CERT.pem ; chmod 0600 /etc/ssl/private/MY_SSL_CERT.key +``` + + +#### Solution 2 + +You can use Volumes: + +`-v ./ssl/:/secrets/ssl/ -e HTTPS=true -e CERTIFICATE=/secrets/ssl/MY_SSL_CERT.pem -e CERTIFICATE=/secrets/ssl/MY_SSL_CERT.key`