Service returning Error 500

[linus0508]

After deploying the docker container the service starts as aspected and the webpage is generated.

On trying to download the public key or generating a shared secrets the web server returns an error 500.

Most likely an issue on my end but would love to get some help (and maybe add the solution to the documentation :))

[linus0508]

There seems to be a problem in building & deploying through portainer - possibly some env variables are not handled correctly. When deploying through bare docker everything is working fine! Will investigate further where the problem lies (except Layer 8) and report back for other users :)

Question for @yahesh: Is it expected that the container takes around 10 minutes before actually generating the key? (Still not testes if this persists when giving a key instead of generating it).

Thanks for your great project! Really like the idea and implementation!

[yahesh]

@linus0508 The container does not generate the private key itself. Instead, it has to be generated and provided externally (see here). In the Container Run example (see here) it is transparently generated and passed to the container as an environment variable.

Mind the note below that example:

"Beware: In the example provided above the RSA_PRIVATE_KEYS environment variable is dynamically generated during each execution. In a production setup you want to manually define the RSA keys and manage key rollovers carefully."

The private key is required to retrieve generated secrets. So transparently generating the private key is not a good idea if old(er) secrets shall be readable after a container update. Instead, that private key should be managed elsewhere and only be provided to the container when running it.

P.S.: The only key material the container generates itself are custom Diffie-Hellman parameters for TLS. This can indeed take a while. If you handle TLS externally, you can skip the generation by passing the SKIP_DHPARAM environment variable as well.