Docker Image Security ca-certificates

[starfoxfs]

Hi,

i have build a Docker Alpine Image what uses Python3 requests to Download Data from https Websites.

So i have added ca-certificates to the Docker Image and updated it:

RUN  apk add --no-cache ca-certificates \
     && update-ca-certificates -f   

Do i need additional custom .crt File or can i use the preinstalled ca-certificates.crt native one ?

Or is it secure enough to use the preinstalled ca-certificates.crt ?

[meyay (Metin Y.)]

Its is a trust store for CA certificates of well trusted CAs.

Unless the https website doesn’t use a certificate signed by a CA not covered by ca-certificates, there is nothing to do.