Self generated certificates

certs

# https://www.devtech101.com/2017/05/18/gotchas-tips-creating-private-docker-registry-self-signed-certificate/
mkdir -p /docker-data/registry/{data,ssl,config}
docker run --rm -v /docker-data/registry/ssl:/certs \
     -e SSL_IP=10.10.10.10 \
     -e SSL_DNS=docker.domain.com \
     -e SSL_SUBJECTdocker.domain.com \
     -e CA_SUBJECT=docker.domain..com \
     -e CA_EXPIRE=1095 \
     paulczar/omgwtfssl
     

docker run -v ~/tmp/certs:/certs \
       -e SSL_SUBJECT="my-web.docker" \
       -e CA_SUBJECT="my-web.docker" \
       -e CA_EXPIRE=1095 \
       paulczar/omgwtfssl 

files created:

./ca-key.pem
./key.pem
./cert.pem
./key.csr
./ca.srl
./openssl.cnf
./ca.pem
./secret.yaml

Copy and set
cert.pem as SSLCertificateFile
key.pem as SSLCertificateKeyFile

e.g.:
SSLEngine On
SSLCertificateFile /opt/ssl/cert.pem
SSLCertificateKeyFile /opt/ssl/key.pem