Adapt Konnect Container for Univention (#236)

* precreate meet keys in ssl, but do the actual action in konnect
* generate all keys for meet within Konnect
* incorporate explicit logging and settings set by ucs app
* make konnect container more dynamic
* set default oidc_issuer_identifier
* print size of container
* builder image is not required for security scanning
* define entrypoint instead of using command
* more cleanup of testing containers
* give logs in case of error

ssl/Dockerfile

@@ -2,7 +2,7 @@ FROM alpine:3.9
 
 ARG VCS_REF
 
-ENV CODE_VERSION=1.0.1 \
+ENV CODE_VERSION=1.1.0 \
     PKI_ROOT=/kopano/easypki \
     PKI_ORGANIZATION="Internal Kopano System" \
     PKI_COUNTRY=DE

ssl/start.sh

@@ -7,6 +7,12 @@ set -euo pipefail
 # clean out any potential port numbers
 FQDN=${FQDN%:*}
 
+# create files so that konnect can write to it
+touch /kopano/ssl/konnectd-identifier-registration.yaml /kopano/ssl/ecparam.pem /kopano/ssl/meet-kwmserver.pem
+# chown to the numerical representation of nobody/nogroup
+chown 65534:65534 /kopano/ssl/konnectd-identifier-registration.yaml /kopano/ssl/ecparam.pem /kopano/ssl/meet-kwmserver.pem
+
+
 if [ ! -f /kopano/ssl/ca.pem ]; then
 	# https://github.com/google/easypki
 	echo "Creating CA certificate..."
@@ -53,27 +59,6 @@ if [ ! -f $secretkey ]; then
 	mv $secretkey.tmp $secretkey
 fi
 
-# Meet guest mode
-ecparam="/kopano/ssl/ecparam.pem"
-if [ ! -f $ecparam ]; then
-	echo "Creating ec param key for Meet..."
-	openssl ecparam -name prime256v1 -genkey -noout -out $ecparam.tmp >/dev/null 2>&1
-	mv $ecparam.tmp $ecparam
-fi
-
-# create registration.yml so that konnect can write to it
-touch /kopano/ssl/konnectd-identifier-registration.yaml
-# chown to the numerical representation of nobody/nogroup
-chown 65534:65534 /kopano/ssl/konnectd-identifier-registration.yaml
-
-eckey="/kopano/ssl/meet-kwmserver.pem"
-if [ ! -f $eckey ]; then
-	echo "Creating ec key for Meet..."
-	openssl ec -in $ecparam -out $eckey.tmp >/dev/null 2>&1
-	chown 65534:65534 $eckey.tmp
-	mv $eckey.tmp $eckey
-fi
-
 echo "SSL certs:"
 ls -l /kopano/ssl/*.*