|
<< Click to Display Table of Contents >> Raynet One Data Hub > 2026.4 > Installation Guide > Data Hub > Docker SSL Certificate Configuration |
When Raynet One Data Hub is deployed using Docker, it may need to communicate with external services or internal infrastructure that use SSL certificates issued by a custom or internal certificate authority (CA). By default, the Docker containers only trust well-known public certificate authorities. To allow connections to services that use custom certificates, you must provide the relevant CA certificates to the containers.
The Docker Compose configuration uses the SSL_CERT_DIR environment variable to specify the directory inside each container where custom SSL certificates are stored. The containers read certificate files from this directory and trust the certificate authorities they represent.
The certificate directory is provided to the containers as a read-only volume mount. A local certs folder on the Docker host is mapped into both the Data Hub server container and the Data Hub Agent container at the path defined by SSL_CERT_DIR.
Both containers use the same SSL_CERT_DIR value and share the same certs volume, so any certificate placed in the host directory is available to both containers.
To make Raynet One Data Hub trust a custom or internal certificate authority, follow these steps:
1.Locate the directory containing your Docker Compose file (for example, docker-compose.yaml or docker-compose-mariadb.yaml).
2.Create a subdirectory named certs in that directory, if it does not already exist.
3.Copy the CA certificate file (in .crt format) into the certs directory. You can place multiple certificate files in this directory if needed.
4.Start or restart the containers using docker compose up -d. The containers will load the certificates from the certs directory on startup.
Note: If you add or replace certificate files after the containers are already running, you must restart the containers for the changes to take effect.
The following settings in the Docker Compose file control SSL certificate handling:
Setting |
Description |
SSL_CERT_DIR |
Environment variable that specifies the directory inside the container where custom SSL certificate files are stored. Must match the container-side path of the volume mount.
Default value: /usr/local/share/ca-certificates/certs/ |
./certs:/usr/local/share/ca-certificates/certs:ro |
Volume mount that maps the certs subdirectory from the Docker host into the container as a read-only volume. Place your CA certificate files in this host directory to make them available inside the container. |