DataGrip · dinaratablina · Dec 10, 2025 · Dec 10, 2025 · Dec 11, 2025 · Dec 11, 2025
diff --git a/README.md b/README.md
@@ -2,3 +2,31 @@
 Docker environment for DataGrip testing
 
 Also see https://github.com/DataGrip/docker-env-oracle for Oracle 11 and https://github.com/DataGrip/docker-env-db2 for Db2
+
+
+### Create certificates
+
+For creating self-signed certificates run:  
+
+#### With default values:
+`./generatessl.sh`  
+
+#### With custom values:  
+`CERT_DIR=</path/to/certificates> CERT_CN="<your-CN-name>" DOMAIN=<your-domain-name> EXTRA_DOMAINS="192.168.1.10,api.myapp.local" DAYS=<certificates-duration> KEY_SIZE=<key-size> ./generatessl.sh`  
+
+#### With ECDSA instead of RSA
+`USE_ECDSA=true ./generatessl.sh`
+
+
+**The default values are:**  
+CERT_DIR = ./certs  
+CERT_CN = Universal  
+DOMAIN = localhost  
+DAYS = 3650  
+KEY_SIZE = 2048
+
+Example:  
+`CERT_DIR=./clickhouse/ssl/25/certs CERT_CN="Clickhouse" DOMAIN=my.domain EXTRA_DOMAINS="192.168.1.10" DAYS=30 KEY_SIZE=4096 ./generatessl.bash`    
+
+Check the certificate:    
+`openssl.exe x509 -in path/to/your/cert -noout -text`    
diff --git a/cassandra/5-ssl/Dockerfile b/cassandra/5-ssl/Dockerfile
@@ -0,0 +1,14 @@
+FROM registry.jetbrains.team/p/datagrip/containers/cassandra:5
+
+COPY ./certs/keystore.node0 "$CASSANDRA_CONFIG"
+COPY ./certs/node0.cer "$CASSANDRA_CONFIG"
+COPY ./certs/node0.cer.pem "$CASSANDRA_CONFIG"
+COPY ./certs/node0.key.pem "$CASSANDRA_CONFIG"
+COPY ./certs/node0.p12 "$CASSANDRA_CONFIG"
+COPY ./certs/truststore.node0 "$CASSANDRA_CONFIG"
+
+COPY ./cassandra.yaml "$CASSANDRA_CONFIG"
+
+EXPOSE 9042
+EXPOSE 9142
+
diff --git a/cassandra/5-ssl/cassandra.yaml b/cassandra/5-ssl/cassandra.yaml
diff --git a/cassandra/5-ssl/certs/keystore.node0 b/cassandra/5-ssl/certs/keystore.node0
diff --git a/cassandra/5-ssl/certs/node0.cer b/cassandra/5-ssl/certs/node0.cer
diff --git a/cassandra/5-ssl/certs/node0.cer.pem b/cassandra/5-ssl/certs/node0.cer.pem
@@ -0,0 +1,25 @@
+Bag Attributes
+    friendlyName: node0
+    localKeyID: 54 69 6D 65 20 31 36 39 30 35 37 37 34 36 30 39 37 36 
+subject=/C=None/L=None/O=None/OU=None/CN=localhost
+issuer=/C=None/L=None/O=None/OU=None/CN=localhost
+-----BEGIN CERTIFICATE-----
+MIIDRjCCAi6gAwIBAgIJAK5AeI3MGS5OMA0GCSqGSIb3DQEBCwUAMFAxDTALBgNV
+BAYTBE5vbmUxDTALBgNVBAcTBE5vbmUxDTALBgNVBAoTBE5vbmUxDTALBgNVBAsT
+BE5vbmUxEjAQBgNVBAMTCWxvY2FsaG9zdDAgFw0yMzA3MjgyMDUwMjNaGA8yMTIz
+MDcwNDIwNTAyM1owUDENMAsGA1UEBhMETm9uZTENMAsGA1UEBxMETm9uZTENMAsG
+A1UEChMETm9uZTENMAsGA1UECxMETm9uZTESMBAGA1UEAxMJbG9jYWxob3N0MIIB
+IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEGNDIPp+JyPFcvjshcErUwX
+fzc6snHYRpcaZ48GiIYLOWr1V4lwYhflpBEYhTKwwzU2lW1HZsjSZM04z3GVg8+/
+Ryi2lBZ46HvdtwDAHEfzminhTdoI5sBD+WLG8qWb9O5PV1KYIkcPp4uiAlZh+zjk
+bkiwHRy77spwgikScRVLB9CJoqvbNeO6E5Za8lkg8sUIPC1cIhIli6td3NExz3Nr
+YOeufJrz9MhWd2p2otJRGuBKAjJrpIG5p+Ijmk0ice0kfRxwtC7kmej5Lz0xiRGa
+3Ktb0WSHw5EV9vlgf57+18lQ1LpfUKzHq04Cr9j11AWciEkLs0VQakPwECrJHwID
+AQABoyEwHzAdBgNVHQ4EFgQUSxehWmp09EiQWCOrm9lox4CVAm8wDQYJKoZIhvcN
+AQELBQADggEBAH5zqYX7yyerfxSaXubuIhRnilV0Zffm9SE8ne5pKkUhOsLI1CN4
+3gk6uzw5c1SlY1VOJT6P1fO/lswMx20GoyEt/87LDybOVLaOFNqATkr3GkFEZAVw
+K7dlsijzOMM0RaX5PFjFabuunDymIig6itk5KSRvsZYGDq8UwpIQTeALpmGTtelV
+YfiYZYbL3Z2rLTAeMzp+jsSSGC50pnsAi1GVeCNxz7S+nD7zScTH5V/y0WazMxlm
+iQcOSByUAUEUwdMo2hJaIr/zdjaxUpcw2wiVJl/FS/APyYf3V5cOr5WGGt8ewHnG
+RXly4JVJp203nPfAAUf+V0y5fcw6xUBcBcQ=
+-----END CERTIFICATE-----
diff --git a/cassandra/5-ssl/certs/node0.key.pem b/cassandra/5-ssl/certs/node0.key.pem
@@ -0,0 +1,32 @@
+Bag Attributes
+    friendlyName: node0
+    localKeyID: 54 69 6D 65 20 31 36 39 30 35 37 37 34 36 30 39 37 36 
+Key Attributes: <No Attributes>
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/cassandra/5-ssl/certs/node0.p12 b/cassandra/5-ssl/certs/node0.p12
diff --git a/cassandra/5-ssl/certs/readme b/cassandra/5-ssl/certs/readme
@@ -0,0 +1,24 @@
+Source:
+https://docs.datastax.com/en/cassandra-oss/3.x/cassandra/configuration/secureSSLCertificates.html
+
+Desired file list:
+        keystore.node0
+        node0.cer
+        node0.cer.pem
+        node0.key.pem
+        node0.p12
+        truststore.node0
+
+Password:
+cassandra
+
+Commands:
+1. keytool -genkey -keyalg RSA -alias node0 -validity 36500 -keystore keystore.node0 -storepass cassandra -keypass cassandra -dname "CN=localhost, OU=None, O=None, L=None, C=None"
+2. keytool -export -alias node0 -file node0.cer -keystore keystore.node0
+3. keytool -import -v -trustcacerts -alias node0 -file node0.cer -keystore truststore.node0 
+4. keytool -importkeystore -srckeystore keystore.node0 -destkeystore node0.p12 -deststoretype PKCS12 -srcstorepass cassandra -deststorepass cassandra
+5. openssl pkcs12 -in node0.p12 -nokeys -out node0.cer.pem -passin pass:cassandra
+6. openssl pkcs12 -in node0.p12 -nodes -nocerts -out node0.key.pem -passin pass:cassandra
+
+Validation:
+openssl pkcs12 -in node0.p12 -nokeys | openssl x509 -noout -enddate
diff --git a/cassandra/5-ssl/certs/truststore.node0 b/cassandra/5-ssl/certs/truststore.node0
diff --git a/generatessl.sh b/generatessl.sh
@@ -0,0 +1,180 @@
+#!/bin/bash
+
+set -euo pipefail
+
+# defaults
+: "${CERT_DIR:=./certs}"
+: "${DOMAIN:=localhost}"
+: "${DAYS:=3650}"
+: "${KEY_SIZE:=2048}"
+: "${CERT_CN:=Universal}"
+: "${USE_ECDSA:=false}"
+
+: "${EXTRA_DOMAINS:=}"
+
+mkdir -p "$CERT_DIR"
+
+cleanup() {
+    rm -f "$CERT_DIR"/*.cnf "$CERT_DIR"/*.csr "$CERT_DIR"/*.srl 2>/dev/null || true
+}
+trap cleanup EXIT
+
+# Generate private key (RSA or ECDSA)
+generate_key() {
+    local keyfile="$1"
+    if [[ "$USE_ECDSA" == "true" ]]; then
+        openssl ecparam -genkey -name prime256v1 -out "$keyfile"
+    else
+        openssl genrsa -out "$keyfile" "$KEY_SIZE"
+    fi
+}
+
+# Build SAN entries for server certificate
+build_san() {
+    local san="DNS:$DOMAIN"
+    local idx=2
+
+    if [[ "$DOMAIN" == "localhost" ]]; then
+        san+=",IP:127.0.0.1,IP:::1"
+        idx=4
+    fi
+
+    # Add extra domains
+    if [[ -n "$EXTRA_DOMAINS" ]]; then
+        IFS=',' read -ra DOMAINS <<< "$EXTRA_DOMAINS"
+        for d in "${DOMAINS[@]}"; do
+            d=$(echo "$d" | xargs)  # trim whitespace
+            if [[ "$d" =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+                san+=",IP:$d"
+            else
+                san+=",DNS:$d"
+            fi
+        done
+    fi
+
+    echo "$san"
+}
+
+# CA configuration
+cat > "$CERT_DIR/ca.cnf" << EOF
+[req]
+distinguished_name = req_dn
+prompt = no
+x509_extensions = v3_ca
+
+[req_dn]
+CN = $CERT_CN CA
+
+[v3_ca]
+basicConstraints = critical, CA:TRUE, pathlen:0
+keyUsage = critical, keyCertSign, cRLSign
+subjectKeyIdentifier = hash
+EOF
+
+# Server configuration with SAN
+SAN_ENTRIES=$(build_san)
+cat > "$CERT_DIR/server.cnf" << EOF
+[req]
+distinguished_name = req_dn
+prompt = no
+req_extensions = v3_req
+
+[req_dn]
+CN = $DOMAIN
+
+[v3_req]
+basicConstraints = CA:FALSE
+keyUsage = critical, digitalSignature, keyEncipherment
+extendedKeyUsage = serverAuth
+subjectAltName = $SAN_ENTRIES
+
+[v3_ext]
+basicConstraints = CA:FALSE
+keyUsage = critical, digitalSignature, keyEncipherment
+extendedKeyUsage = serverAuth
+subjectAltName = $SAN_ENTRIES
+subjectKeyIdentifier = hash
+authorityKeyIdentifier = keyid,issuer
+EOF
+
+# Client configuration
+cat > "$CERT_DIR/client.cnf" << EOF
+[req]
+distinguished_name = req_dn
+prompt = no
+req_extensions = v3_req
+
+[req_dn]
+CN = $CERT_CN-client
+
+[v3_req]
+basicConstraints = CA:FALSE
+keyUsage = critical, digitalSignature
+extendedKeyUsage = clientAuth
+
+[v3_ext]
+basicConstraints = CA:FALSE
+keyUsage = critical, digitalSignature
+extendedKeyUsage = clientAuth
+subjectKeyIdentifier = hash
+authorityKeyIdentifier = keyid,issuer
+EOF
+
+# Generate CA
+echo "==> Generating CA..."
+generate_key "$CERT_DIR/ca.key"
+openssl req -new -x509 -sha256 -days "$DAYS" \
+    -key "$CERT_DIR/ca.key" \
+    -out "$CERT_DIR/ca.pem" \
+    -config "$CERT_DIR/ca.cnf"
+
+# Generate server certificate
+echo "==> Generating server certificate..."
+generate_key "$CERT_DIR/server.key"
+openssl req -new -sha256 \
+    -key "$CERT_DIR/server.key" \
+    -out "$CERT_DIR/server.csr" \
+    -config "$CERT_DIR/server.cnf"
+
+openssl x509 -req -sha256 -days "$DAYS" \
+    -in "$CERT_DIR/server.csr" \
+    -CA "$CERT_DIR/ca.pem" \
+    -CAkey "$CERT_DIR/ca.key" \
+    -CAcreateserial \
+    -out "$CERT_DIR/server.crt" \
+    -extfile "$CERT_DIR/server.cnf" \
+    -extensions v3_ext
+
+# Create full chain for server
+cat "$CERT_DIR/server.crt" "$CERT_DIR/ca.pem" > "$CERT_DIR/server.pem"
+
+# Generate client certificate
+echo "==> Generating client certificate..."
+generate_key "$CERT_DIR/client.key"
+openssl req -new -sha256 \
+    -key "$CERT_DIR/client.key" \
+    -out "$CERT_DIR/client.csr" \
+    -config "$CERT_DIR/client.cnf"
+
+openssl x509 -req -sha256 -days "$DAYS" \
+    -in "$CERT_DIR/client.csr" \
+    -CA "$CERT_DIR/ca.pem" \
+    -CAkey "$CERT_DIR/ca.key" \
+    -CAserial "$CERT_DIR/ca.srl" \
+    -out "$CERT_DIR/client.crt" \
+    -extfile "$CERT_DIR/client.cnf" \
+    -extensions v3_ext
+
+cat "$CERT_DIR/client.crt" "$CERT_DIR/ca.pem" > "$CERT_DIR/client.pem"
+
+# Set permissions (skip silently on Windows)
+chmod 600 "$CERT_DIR"/*.key 2>/dev/null || true
+chmod 644 "$CERT_DIR"/*.pem "$CERT_DIR"/*.crt 2>/dev/null || true
+
+# Chain verification
+echo "==> Verifying certificate chain..."
+openssl verify -CAfile "$CERT_DIR/ca.pem" "$CERT_DIR/server.crt"
+openssl verify -CAfile "$CERT_DIR/ca.pem" "$CERT_DIR/client.crt"
+
+echo "Done!"
+echo "Certificates are in $CERT_DIR/"
diff --git a/mariadb/10.3/Dockerfile → mariadb/ssl/10.3/Dockerfile b/mariadb/10.3/Dockerfile → mariadb/ssl/10.3/Dockerfile
diff --git a/mariadb/10.3/cert/ca-cert.pem → mariadb/ssl/10.3/cert/ca-cert.pem b/mariadb/10.3/cert/ca-cert.pem → mariadb/ssl/10.3/cert/ca-cert.pem
diff --git a/mariadb/10.3/cert/ca-key.pem → mariadb/ssl/10.3/cert/ca-key.pem b/mariadb/10.3/cert/ca-key.pem → mariadb/ssl/10.3/cert/ca-key.pem
diff --git a/mariadb/10.3/cert/client-cert.pem → mariadb/ssl/10.3/cert/client-cert.pem b/mariadb/10.3/cert/client-cert.pem → mariadb/ssl/10.3/cert/client-cert.pem
diff --git a/mariadb/10.3/cert/client-key.pem → mariadb/ssl/10.3/cert/client-key.pem b/mariadb/10.3/cert/client-key.pem → mariadb/ssl/10.3/cert/client-key.pem
diff --git a/mariadb/10.3/cert/client-req.pem → mariadb/ssl/10.3/cert/client-req.pem b/mariadb/10.3/cert/client-req.pem → mariadb/ssl/10.3/cert/client-req.pem
diff --git a/mariadb/10.3/cert/server-cert.pem → mariadb/ssl/10.3/cert/server-cert.pem b/mariadb/10.3/cert/server-cert.pem → mariadb/ssl/10.3/cert/server-cert.pem
diff --git a/mariadb/10.3/cert/server-key.pem → mariadb/ssl/10.3/cert/server-key.pem b/mariadb/10.3/cert/server-key.pem → mariadb/ssl/10.3/cert/server-key.pem
diff --git a/mariadb/10.3/cert/server-req.pem → mariadb/ssl/10.3/cert/server-req.pem b/mariadb/10.3/cert/server-req.pem → mariadb/ssl/10.3/cert/server-req.pem
diff --git a/mariadb/10.3/cert3/ca.key → mariadb/ssl/10.3/cert3/ca.key b/mariadb/10.3/cert3/ca.key → mariadb/ssl/10.3/cert3/ca.key
diff --git a/mariadb/10.3/cert3/ca.pem → mariadb/ssl/10.3/cert3/ca.pem b/mariadb/10.3/cert3/ca.pem → mariadb/ssl/10.3/cert3/ca.pem
diff --git a/mariadb/10.3/cert3/ca.srl → mariadb/ssl/10.3/cert3/ca.srl b/mariadb/10.3/cert3/ca.srl → mariadb/ssl/10.3/cert3/ca.srl
diff --git a/mariadb/10.3/cert3/client.crt → mariadb/ssl/10.3/cert3/client.crt b/mariadb/10.3/cert3/client.crt → mariadb/ssl/10.3/cert3/client.crt
diff --git a/mariadb/10.3/cert3/client.csr → mariadb/ssl/10.3/cert3/client.csr b/mariadb/10.3/cert3/client.csr → mariadb/ssl/10.3/cert3/client.csr
diff --git a/mariadb/10.3/cert3/client.key → mariadb/ssl/10.3/cert3/client.key b/mariadb/10.3/cert3/client.key → mariadb/ssl/10.3/cert3/client.key
diff --git a/mariadb/10.3/cert3/client.pem → mariadb/ssl/10.3/cert3/client.pem b/mariadb/10.3/cert3/client.pem → mariadb/ssl/10.3/cert3/client.pem
diff --git a/mariadb/10.3/cert3/server.crt → mariadb/ssl/10.3/cert3/server.crt b/mariadb/10.3/cert3/server.crt → mariadb/ssl/10.3/cert3/server.crt
diff --git a/mariadb/10.3/cert3/server.csr → mariadb/ssl/10.3/cert3/server.csr b/mariadb/10.3/cert3/server.csr → mariadb/ssl/10.3/cert3/server.csr
diff --git a/mariadb/10.3/cert3/server.key → mariadb/ssl/10.3/cert3/server.key b/mariadb/10.3/cert3/server.key → mariadb/ssl/10.3/cert3/server.key
diff --git a/mariadb/10.3/cert3/server.pem → mariadb/ssl/10.3/cert3/server.pem b/mariadb/10.3/cert3/server.pem → mariadb/ssl/10.3/cert3/server.pem
diff --git a/mariadb/10.3/conf/50-server.cnf → mariadb/ssl/10.3/conf/50-server.cnf b/mariadb/10.3/conf/50-server.cnf → mariadb/ssl/10.3/conf/50-server.cnf
diff --git a/mariadb/10.3/conf/init.sql → mariadb/ssl/10.3/conf/init.sql b/mariadb/10.3/conf/init.sql → mariadb/ssl/10.3/conf/init.sql
diff --git a/mariadb/10.3/conf/ssl.sh → mariadb/ssl/10.3/conf/ssl.sh b/mariadb/10.3/conf/ssl.sh → mariadb/ssl/10.3/conf/ssl.sh
diff --git a/mariadb/ssl/12.1/Dockerfile b/mariadb/ssl/12.1/Dockerfile
@@ -0,0 +1,9 @@
+FROM mariadb:12.1
+
+COPY ./conf/init.sql /docker-entrypoint-initdb.d/init.sql
+
+COPY ./certs/ca.pem     /etc/mysql/cacert.pem
+COPY ./certs/server.key /etc/mysql/server-key.pem
+COPY ./certs/server.pem /etc/mysql/server-cert.pem
+
+COPY ./conf/50-server.cnf /etc/mysql/mariadb.conf.d/
diff --git a/mariadb/ssl/12.1/certs/ca.key b/mariadb/ssl/12.1/certs/ca.key
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/mariadb/ssl/12.1/certs/ca.pem b/mariadb/ssl/12.1/certs/ca.pem
@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----
+MIIC2TCCAcGgAwIBAgIUSrM1O7YhJIZDtu7xQP4yDL3lxi0wDQYJKoZIhvcNAQEL
+BQAwFTETMBEGA1UEAwwKTWFyaWFEQiBDQTAeFw0yNTExMTIxMDQ2MjhaFw0zNTEx
+MTAxMDQ2MjhaMBUxEzARBgNVBAMMCk1hcmlhREIgQ0EwggEiMA0GCSqGSIb3DQEB
+AQUAA4IBDwAwggEKAoIBAQDP5qLVF2U1dqMZ0QKGi256Iy0JCasVIaKKSudzsZvi
+yviH0oxlPWokFZYYYLff2zoPgeiux1NPlHxOIz0UH5/hRQpPiqFgcL1FldQComsk
+Qa1ucIdI/lzzFGC2pe71V2mmWqQ7U+25T9uxfYkY5ZXfoAF4XKQSjQhz7SsqJjUO
+GSOZWn164T8ZbA8r/wjL1QCR32Xf/stir2FpjcgsRzgDgMQWhTFuYdrV5ZPjsKvi
+lr3zN5XYUXpHfRLTfS7jc82CJREjndMgchYMzXAU33wHQzzQi0Mjzdv92YYw0lGj
+NrskJD2w0Bzo88pDb+IBQUm7PNaYdf/Sv0BQI/hQId2fAgMBAAGjITAfMB0GA1Ud
+DgQWBBTeL/QJBFn/UVb14r/FdvyUVNLkCzANBgkqhkiG9w0BAQsFAAOCAQEALVC8
+oMW3Ygx+jfuZueukt1SBWsDs17jpGaITm4AgRqmNk3OhDH61Qw7YCQuIGBw6ykM/
+10rmqim+slLxWLKmpZqmIU7Oi0rCIB0Y/skwnAgyEjjtFU2B7FCCJQfTuncu5Jer
+VNGF3K+p33/czQLugS17ZBhVTaFLPP47IY0J9zTBOpCdpXR8+J2si/bD2wYBa3qL
+q3iKFgaZzbmPBLl70Rx++LhP3X8cJ+M4adm/xm2AiQD7Ejp9+T9GUT1C6pMdiNT5
+d3Ca5Y1s4kAQRmNHaB8KDQsAIb9RsqeCuPxsZqhfBVUYPUk9AmjTzrHb4ACp2gmZ
+1MXdTFVQRiysv6c+hQ==
+-----END CERTIFICATE-----
diff --git a/mariadb/ssl/12.1/certs/ca.srl b/mariadb/ssl/12.1/certs/ca.srl
@@ -0,0 +1 @@
+6264BB963BE04F79936127782ABC6DB4887B35B9
diff --git a/mariadb/ssl/12.1/certs/client.crt b/mariadb/ssl/12.1/certs/client.crt
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----