Adding Custom Certificates
Learn how to configure Hanzo KMS with custom certificates
By default, the Hanzo KMS Docker image includes certificates from well-known public certificate authorities. However, some integrations with Hanzo KMS may need to communicate with your internal services that use private certificate authorities. To configure trust for custom certificates, follow these steps. This is particularly useful for connecting Hanzo KMS with self-hosted services like GitLab.
Prerequisites
- Docker
- Standalone Hanzo KMS image
- Certificate public key
.crtfiles
Setup
- Place all your public key
.crtfiles into a single directory. - Mount the directory containing the
.crtfiles to the/usr/local/share/ca-certificates/path in the Hanzo KMS container. - Set the following environment variable on your Hanzo KMS container:
NODE_EXTRA_CA_CERTS=/etc/ssl/certs/ca-certificates.crt - Start the Hanzo KMS container.
By following these steps, your Hanzo KMS container will trust the specified certificates, allowing you to securely connect Hanzo KMS to your internal services.
How is this guide?
Last updated on