Create load-ca.sh

load-ca.sh

@@ -0,0 +1,17 @@
+#!/bin/sh
+
+# 将环境变量中的证书内容写入文件
+echo "$CA_CERT_CONTENT" | sed 's/\\n/\n/g' > /certs/custom/db-ca.crt
+
+# 验证证书有效性
+if ! openssl x509 -in /certs/custom/db-ca.crt -noout; then
+  echo "Invalid CA certificate format"
+  exit 1
+fi
+
+# 添加到系统信任链
+cp /certs/custom/db-ca.crt /usr/local/share/ca-certificates/
+update-ca-certificates
+
+# 执行原始ENTRYPOINT
+exec "$@"