The production signer is using a really old base OS (Debian 4.0 Etch or
5.0 Lenny) with some packages like openssl from Debian 6.0 Stretch. This
commit uses the oldest available Docker base image to make a somewhat
reproducible variant of this OS.
This commit renames the application container to webdb and drops the
test suffix in favour of using www.cacert.localhost directly. The server
certificate for www.cacert.localhost got an additional
subjectAlternativeName secure.cacert.localhost and is used for both
hostnames now.
Environment variables containing _APP have been renamed to _WEBDB to
keep consistency.
- Add dependencies for gettext and PDF support
- add whois and netbase to support whois checks
- remove docker/mysql.php because configuration should be done via
environment variables
- install CAcert CA certificates to allow retrieval of translation data
from translations.cacert.org
- build i18n files on start of application container
- disable broken OCSP stapling for local certificates
- add language data during database initialization
