From b08a231443736309c60f43fb570ac9e620edf1b8 Mon Sep 17 00:00:00 2001
From: Asara <amarpreet@minhas.io>
Date: Tue, 13 Oct 2020 22:56:33 -0400
Subject: [PATCH] Add docker configs for jenkins with ssl god kill me

---
 docker/jenkins/Dockerfile       |  2 ++
 docker/jenkins/files/jenkins.sh | 17 +++++++++++++++++
 2 files changed, 19 insertions(+)

diff --git a/docker/jenkins/Dockerfile b/docker/jenkins/Dockerfile
index 8150401..b67fe8b 100644
--- a/docker/jenkins/Dockerfile
+++ b/docker/jenkins/Dockerfile
@@ -10,9 +10,11 @@ RUN apk add --no-cache \
   bash \
   coreutils \
   curl \
+  expect \
   git \
   git-lfs \
   openssh-client \
+  openssl \
   tini \
   ttf-dejavu \
   tzdata \
diff --git a/docker/jenkins/files/jenkins.sh b/docker/jenkins/files/jenkins.sh
index bd7bcc0..04e0528 100755
--- a/docker/jenkins/files/jenkins.sh
+++ b/docker/jenkins/files/jenkins.sh
@@ -1,5 +1,22 @@
 #! /bin/bash -e
 
+# cert prep
+for i in /secrets/jenkins.crt /etc/ssl/certs/ca-cert-MaskedName_Root_CA.pem; do
+    cat $i >> /tmp/jenkins_bundle.crt
+    echo >> /tmp/jenkins_bundle.crt
+done
+
+expect <(cat <<EOH
+spawn openssl pkcs12 -inkey /secrets/jenkins.key -in /tmp/jenkins_bundle.crt -export -out /secrets/jenkins.jks
+expect "Enter Export Password:"
+send -- "password\r"
+expect "Verifying - Enter Export Password:"
+send -- "password\r"
+interact
+EOH
+)
+
+# defaultish jenkins stuff
 : "${JENKINS_WAR:="/usr/share/jenkins/jenkins.war"}"
 : "${JENKINS_HOME:="/var/jenkins_home"}"
 : "${COPY_REFERENCE_FILE_LOG:="${JENKINS_HOME}/copy_reference_file.log"}"