I am trying to set up SSL for a ASP.NET web application that is running in a docker for windows container. I am running on Windows 10.
Client: Docker Engine - Community
Version: 19.03.8
API version: 1.40
Go version: go1.12.17
Git commit: afacb8b
Built: Wed Mar 11 01:23:10 2020
OS/Arch: windows/amd64
Experimental: true
Server: Docker Engine - Community
Engine:
Version: 19.03.8
API version: 1.40 (minimum version 1.24)
Go version: go1.12.17
Git commit: afacb8b
Built: Wed Mar 11 01:37:20 2020
OS/Arch: windows/amd64
Experimental: true
Below is my dockerfile:
FROM microsoft/aspnet:4.7.2-windowsservercore-1803
USER ContainerAdministrator
EXPOSE 443
ARG source
WORKDIR /inetpub/wwwroot
COPY ${source:-obj/Docker/publish} .
RUN Add-WindowsFeature Web-Scripting-Tools
RUN Remove-WebSite -Name 'Default Web Site'
RUN New-Website -Name 'myApp' -IPAddress '*' -Port 443 -PhysicalPath C:\inetpub\wwwroot -ApplicationPool '.NET v4.5' -Ssl -SslFlags 0
#CMD ["powershell.exe", "-File", "AddCertificate.ps1"]
#RUN ["powershell", "C:\inetpub\wwwroot\AddCertificate.ps1"]
RUN powershell.exe -Command "\
Import-Module IISAdministration; \
Import-Module WebAdministration; \
$pwd = ConvertTo-SecureString -String 'passw0rd!' -Force -AsPlainText; \
# Import the certificate and store it in a variable to bind to later; \
$cert = Import-PfxCertificate -Exportable -FilePath C:\inetpub\wwwroot\selfCert.pfx -CertStoreLocation cert:\localMachine\My -Password $pwd; \
# Take the imported certificate and bind it to all traffic toward port 443 (you need to specify IP if you want multiple apps on 1 docker which I believe is ill-advised); \
New-Item -Path IIS:\SslBindings\0.0.0.0!443 -value $cert;"
Problem: Docker fails with the error that selfCert.pfx is not found.
I tried moving all these commands to a powershell script and tried running that too. Somehow docker/powershell cannot find my .ps1 file too.
When I connect to the container manually, I can see the files in the expected location. I can also execute .PS1 successfully. The problem occurs only when its executed from the dockerfile.
I tried USER ContainerAdministrator, also different ways of calling PowerShell with -Bypass -File but unable to run it from dockerfile.
Need some help in getting this run and identify why this is happening.
Thanks.