From 5b14c0652dd087a2f91a66a84df2e0e06b8a7744 Mon Sep 17 00:00:00 2001 From: Valery Masiutsin Date: Fri, 17 May 2024 12:58:14 +0100 Subject: [PATCH 1/3] Enabling back SHA1 signed certificates support, it was disabled in RHEL9 and breaks postgresql db access on Azure --- Dockerfile | 3 +++ Dockerfile.rh | 3 +++ Dockerfile.slim | 3 +++ 3 files changed, 9 insertions(+) diff --git a/Dockerfile b/Dockerfile index 662361c..022fece 100644 --- a/Dockerfile +++ b/Dockerfile @@ -100,6 +100,9 @@ RUN rm -rf ${TEMP} \ && chown -R nexus:nexus ${CONFIG_HOME} \ && chown -R nexus:nexus ${LOGS_HOME} +# enabling back support for SHA1 signed certificates +RUN update-crypto-policies --set DEFAULT:SHA1 + # This is where we will store persistent data VOLUME ${SONATYPE_WORK} VOLUME ${LOGS_HOME} diff --git a/Dockerfile.rh b/Dockerfile.rh index ea592bf..3c62899 100644 --- a/Dockerfile.rh +++ b/Dockerfile.rh @@ -111,6 +111,9 @@ RUN usermod -a -G root nexus \ && bash /uid_template.sh \ && chmod 0664 /etc/passwd +# enabling back support for SHA1 signed certificates +RUN update-crypto-policies --set DEFAULT:SHA1 + # This is where we will store persistent data VOLUME ${SONATYPE_WORK} VOLUME ${LOGS_HOME} diff --git a/Dockerfile.slim b/Dockerfile.slim index 1cbc9c6..1ebd91e 100644 --- a/Dockerfile.slim +++ b/Dockerfile.slim @@ -98,6 +98,9 @@ RUN rm -rf ${TEMP} \ && chown -R nexus:nexus ${CONFIG_HOME} \ && chown -R nexus:nexus ${LOGS_HOME} +# enabling back support for SHA1 signed certificates +RUN update-crypto-policies --set DEFAULT:SHA1 + # This is where we will store persistent data VOLUME ${SONATYPE_WORK} VOLUME ${LOGS_HOME} From badfa461d90e6161e2fd345282d039806ba3e66c Mon Sep 17 00:00:00 2001 From: Sonatype Zion Date: Wed, 10 Jul 2024 15:01:40 +0000 Subject: [PATCH 2/3] Update IQ Server to 1.179.0-01. --- Dockerfile.slim | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Dockerfile.slim b/Dockerfile.slim index 79f0d51..38859bb 100644 --- a/Dockerfile.slim +++ b/Dockerfile.slim @@ -16,8 +16,8 @@ FROM registry.access.redhat.com/ubi9/openjdk-17:1.20-2 # Build parameters -ARG IQ_SERVER_VERSION=1.178.0-06 -ARG IQ_SERVER_SHA256=d6f72c8754090f3a80e512a96ce106acca48bc0c66bb495b1e0a3f5515f6e095 +ARG IQ_SERVER_VERSION=1.179.0-01 +ARG IQ_SERVER_SHA256=dbd42966ec944ffb13135392e64b5b240fe178951c54842076e2d76f8ce6c8a1 ARG TEMP="/tmp/work" ARG IQ_HOME="/opt/sonatype/nexus-iq-server" ARG SONATYPE_WORK="/sonatype-work" @@ -31,7 +31,7 @@ LABEL name="Nexus IQ Server image" \ maintainer="Sonatype " \ vendor=Sonatype \ version="${IQ_SERVER_VERSION}" \ - release="1.178.0" \ + release="1.179.0" \ url="https://www.sonatype.com" \ summary="The Nexus IQ Server" \ description="Nexus IQ Server is a policy engine powered by precise intelligence on open source components. \ From 004a599a4de2f4644656d9f7dcc7094cfa6cfa36 Mon Sep 17 00:00:00 2001 From: Sonatype Zion Date: Wed, 10 Jul 2024 15:05:27 +0000 Subject: [PATCH 3/3] Update IQ Server to 1.179.0-01. --- Dockerfile | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Dockerfile b/Dockerfile index aa37431..23c6474 100644 --- a/Dockerfile +++ b/Dockerfile @@ -18,8 +18,8 @@ FROM registry.access.redhat.com/ubi9/openjdk-17:1.20-2 # Build parameters -ARG IQ_SERVER_VERSION=1.178.0-06 -ARG IQ_SERVER_SHA256=d6f72c8754090f3a80e512a96ce106acca48bc0c66bb495b1e0a3f5515f6e095 +ARG IQ_SERVER_VERSION=1.179.0-01 +ARG IQ_SERVER_SHA256=dbd42966ec944ffb13135392e64b5b240fe178951c54842076e2d76f8ce6c8a1 ARG TEMP="/tmp/work" ARG IQ_HOME="/opt/sonatype/nexus-iq-server" ARG SONATYPE_WORK="/sonatype-work" @@ -33,7 +33,7 @@ LABEL name="Nexus IQ Server image" \ maintainer="Sonatype " \ vendor=Sonatype \ version="${IQ_SERVER_VERSION}" \ - release="1.178.0" \ + release="1.179.0" \ url="https://www.sonatype.com" \ summary="The Nexus IQ Server" \ description="Nexus IQ Server is a policy engine powered by precise intelligence on open source components. \