diff --git a/.secrets.baseline b/.secrets.baseline
index 8f4cb8e3..3b25e42a 100644
--- a/.secrets.baseline
+++ b/.secrets.baseline
@@ -171,7 +171,7 @@
"filename": "docs/tutorial-local-server.rst",
"hashed_secret": "25ab86bed149ca6ca9c1c0d5db7c9a91388ddeab",
"is_verified": false,
- "line_number": 101
+ "line_number": 99
}
],
"docs/tutorial-multi-signoff.rst": [
diff --git a/docker-compose.yml b/docker-compose.yml
index c0c82099..bc593611 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,7 +1,6 @@
volumes:
db-data:
debug-mail:
- autograph-certs:
attachments:
services:
db:
@@ -25,18 +24,8 @@ services:
platform: linux/amd64
image: mozilla/autograph
user: root
- volumes:
- - autograph-certs:/tmp/autograph
-
- certchains:
- image: httpd:2
- volumes:
- - autograph-certs:/usr/local/apache2/htdocs/
- depends_on:
- - autograph
ports:
- - 9999:80
-
+ - 8000:8000
web:
build:
dockerfile: RemoteSettings.Dockerfile
@@ -70,7 +59,6 @@ services:
profiles: [browser-test]
depends_on:
- web
- - certchains
environment:
- SERVER=http://web:8888/v1
- MAIL_DIR=/var/debug-mail/
diff --git a/docs/tutorial-local-server.rst b/docs/tutorial-local-server.rst
index 503d5e39..0aaf051e 100644
--- a/docs/tutorial-local-server.rst
+++ b/docs/tutorial-local-server.rst
@@ -65,15 +65,13 @@ With Multi-signoff (advanced)
Using a different configuration, we can obtain a local instance that has proper authentication and multi-signoff that interacts with an `Autograph instance `_ in order to sign the data, roughly like the STAGE server.
-We will run the Autograph container in a separate terminal. Since Autograph generates the ``x5u`` certificate chains on startup, we will use a volume mounted on the same location, so that Firefox can download them at the same location as the native ``x5u`` URLs (Autograph will point ``x5u`` URLs to ``file:///tmp/attachments``).
-
.. code-block:: bash
mkdir -m 777 /tmp/attachments # world writable
.. code-block:: bash
- docker run -v /tmp/attachments:/tmp/attachments \
+ docker run -p 8000:8000 \
--rm --name autograph mozilla/autograph
And run the Remote Settings server with a link to ``autograph`` container:
@@ -109,6 +107,12 @@ Unlike with *Simple Mode*, we'll need an ``admin`` user:
Prepare the client
------------------
+The server will refer to ``http://autograph:8000/`` in the certificate chains URLs. Since the browser is going to have to fetch them, this line has to be added in the *hosts* file:
+
+.. code-block:: bash
+
+ echo "127.0.0.1 autograph" >> /etc/hosts
+
The official way to point the client at another server is using the
`Remote Settings dev tools
`_. This
diff --git a/tests/plugins/test_signer.py b/tests/plugins/test_signer.py
index 6390af8c..60d6c064 100644
--- a/tests/plugins/test_signer.py
+++ b/tests/plugins/test_signer.py
@@ -36,7 +36,7 @@ def canonical_json(records, last_modified):
async def verify_signature(records, timestamp, signature):
- x5u = signature["x5u"].replace("file:///tmp/autograph/", "http://certchains/")
+ x5u = signature["x5u"]
serialized = canonical_json(records, timestamp).encode("utf-8")
async with aiohttp.ClientSession() as session: