Additional Trusted Certificates

[pmclain]

It would be nice if all certificates located in ${WARDEN_SSL_DIR}/rootca/certs would be installed when starting a container. I recently wanted to sniff outbound traffic from an application using Charles and needed to install the Charles root cert in the php-fpm containers. I did this by directly mounting the root cert with

x-volumes: &volumes
  - ${WARDEN_SSL_DIR}/rootca/certs/charles.pem:/etc/pki/ca-trust/source/anchors/charles.pem:ro

This worked fine along with setting the proxy env variables for the php and php debug services. It got me wondering if we could modify the entrypoint script to install all certificates located in /etc/ssl/warden-rootca-cert/ instead of just /etc/ssl/warden-rootca-cert/ca.cert.pem. It's probably not a common use case and I'm struggling to think of a case where I would install more than one additional cert.

https://github.com/davidalger/warden/blob/bb4df49822e48c922af30428df339d85274be329/images/php-fpm/context/docker-entrypoint#L9-L12