<div dir="ltr"><div dir="ltr"><div>Hi Jesse,</div><div><br></div><div>I'd like to let you know that we have created a PKI ACME container that can be</div><div>deployed much more easily on Podman or OpenShift:</div><div><a href="https://github.com/dogtagpki/pki/blob/master/docs/installation/acme/Deploying_ACME_on_Podman.md">https://github.com/dogtagpki/pki/blob/master/docs/installation/acme/Deploying_ACME_on_Podman.md</a></div><div><a href="https://github.com/dogtagpki/pki/blob/master/docs/installation/acme/Deploying_ACME_on_OpenShift.md">https://github.com/dogtagpki/pki/blob/master/docs/installation/acme/Deploying_ACME_on_OpenShift.md</a></div><div><br></div><div><div>By default the container will generate a self-signed CA signing certificate and use</div><div>an ephemeral database, but you can configure it with a permanent certificate and</div><div>persistent database.</div><div><br></div>We've also set up a demo instance that you can try:</div><div><a href="https://acme.demo.dogtagpki.org/acme/directory">https://acme.demo.dogtagpki.org/acme/directory</a></div><div><br></div><div>Just let me know if you have any questions. Thanks!<br></div></div><div><br></div><div>--</div><div>Endi S. Dewata</div><div><br></div><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Jun 2, 2020 at 8:35 AM Jesse L Van hill <<a href="mailto:jlvanhil@us.ibm.com">jlvanhil@us.ibm.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><p><font size="2">Hi Endi -</font><br><br><font size="2">Unfortunately, customer issues have kept me from pursuing this further. I or one of my team still intends on doing so. I will be sure to let you know when I have tested.</font><br><br><font size="2" face="Liberation Mono">Jesse Van Hill</font><br><font size="2" face="Liberation Mono">Websphere Identity Management Architect & Dev Lead</font><br><font size="2" face="Liberation Mono">WebSphere Application Server & Open Liberty</font><br><a href="https://openliberty.io/" target="_blank"><u><font color="#0000FF">https://openliberty.io/</font></u></a> <br><u><font size="2"> </font></u><br><font size="2" face="Liberation Mono">507-513-6234 <a href="mailto:jlvanhil@us.ibm.com" target="_blank">jlvanhil@us.ibm.com</a></font><br><br><img src="cid:17301a89062308fca931" alt="Inactive hide details for Endi Sukma Dewata ---06/01/2020 10:42:43 PM-------- Original Message ----- > > Hi -" width="16" height="16" border="0"><font size="2" color="#424282">Endi Sukma Dewata ---06/01/2020 10:42:43 PM-------- Original Message ----- > > Hi -</font><br><br><font size="2" color="#5F5F5F">From: </font><font size="2">Endi Sukma Dewata <<a href="mailto:edewata@redhat.com" target="_blank">edewata@redhat.com</a>></font><br><font size="2" color="#5F5F5F">To: </font><font size="2">Jesse L Van hill <<a href="mailto:jlvanhil@us.ibm.com" target="_blank">jlvanhil@us.ibm.com</a>></font><br><font size="2" color="#5F5F5F">Cc: </font><font size="2"><a href="mailto:pki-devel@redhat.com" target="_blank">pki-devel@redhat.com</a></font><br><font size="2" color="#5F5F5F">Date: </font><font size="2">06/01/2020 10:42 PM</font><br><font size="2" color="#5F5F5F">Subject: </font><font size="2">[EXTERNAL] Re: [Pki-devel] ACME Support: Error issuing certificate</font><br></p><hr style="color:rgb(128,145,165)" width="100%" size="2" noshade align="left"><tt><font size="2">Hi Jesse,<br><br>I was just wondering if you managed to test against the ACME server.<br>FYI, we're working on adding an embedded CA into the ACME server so<br>it can be containerized more easily without dependency on a separate<br>CA. Hopefully we will have something usable by the end of the month.<br><br>--<br>Endi S. Dewata</font></tt><br> <p></p></div> </blockquote></div></div>