Enable HTTPS with Zentao Docker Image

[drakosu]

This Docker image doesn't seem to support HTTPS by default.
I've done a quick patch today, just leave here for a record.

The patch takes official document as reference - linux一键安装包配置https. The trick is to modify debian/rootfs/opt/zbox/etc/apache/httpd.conf.tpl to make httpd.conf comes up with HTTPS related settings described in the official document.

Here are steps, in my practice I use docker-compose.yml:

1. Bring up a Zentao container with docker-compose.yml configured properly according to README, and additionally mount a sharing folder.

    volumes:
      - '/share/Container/Zentao/data:/data'
      - /share/Container/Zentao/backup:/mnt/backup

2. copy folder /opt/zbox/etc/apache from the running Zentao to the mounted share folder.

   ## Enter container
   docker exec -it zentao /bin/bash

   ## in zantao container
   cp -r /opt/zbox/etc/apache /mnt/backup
   ## Exit container
   exit

3. Modify /share/Container/Zentao/backup/apache/httpd.conf.tpl in reference to the official document
   • Modify line 7

{{#if HTTPS_ENABLE}}
Listen          {{APP_DEFAULT_PORT}} https
SSLPassPhraseDialog builtin
SSLRandomSeed startup file:/dev/urandom  256
SSLRandomSeed connect builtin
SSLCryptoDevice builtin
{{else}}
Listen          {{APP_DEFAULT_PORT}}
{{/if}}

• Add followings before line 193. Note: Use the actual file names of your_cert.

{{#if HTTPS_ENABLE}}
 ErrorLog /opt/zbox/logs/ssl_error_log
 TransferLog /opt/zbox/logs/ssl_access_log
 CustomLog /opt/zbox/logs/ssl_custom_log combined
 LogLevel warn
 SSLEngine on
 SSLProtocol all -SSLv2 -SSLv3
 SSLCipherSuite HIGH:3DES:!aNULL:!MD5:!SEED:!IDEA
 SSLCertificateFile /opt/zbox/etc/apache/cert/your_cert.crt
 SSLCertificateKeyFile /opt/zbox/etc/apache/cert/your_key.key
{{/if}}

4. Restart Zentao with modified docker-compose.yml with following settings in the corresponding section. Note: Use your actual path_to_your_SSL_cert.

    ports:
      - '443:80'

    volumes:
      - /share/Container/Zentao/data:/data
      - /share/Container/Zentao/backup/apache:/opt/zbox/etc/apache
      - /path_to_your_SSL_cert:/opt/zbox/etc/apache/cert

    environment:
      - HTTPS_ENABLE=true

With these steps, I am able to access my Zentao with HTTPS.

[ysicing]

Looks Great!
Would it be better to store the certificate persistence in the /data directory?

[drakosu]

Yes, that sounds better. Keep 'data' in /data directory :D