I'm getting an issue while deploying a .net-core web-API to a Docker container on Ubuntu. Everything works as expected, but from my application, I need to call other services via https and those hosts use certificates signed by self-maintained root certificates.
In this scenario, I get SSL-errors while calling this services (SSL-not valid) and therefore I need to install this root-certificate in the docker-container or somehow use the root-certificate in the .net-core application.
How can this be done? Is there a best practice to handle this situation? Will .net-core access the right keystore on the Ubuntu?
Since .NET Core uses OpenSSL on Linux, you need to set up your Linux environment in the container so that OpenSSL will pick up the certificate.
This is done by (+ Dockerfile examples):
Copying the the certificate .crt file to a location that update-ca-certificates will scan for trusted certificates - e.g. /usr/local/share/ca-certificates/ oron RHEL /etc/pki/ca-trust/source/anchors/:
COPY myca.crt /usr/local/share/ca-certificates/