Merge branch 'master' into old_signer_image

The production signer is using a really old base OS (Debian 4.0 Etch or
5.0 Lenny) with some packages like openssl from Debian 6.0 Stretch. This
commit uses the oldest available Docker base image to make a somewhat
reproducible variant of this OS.

README.md

@@ -55,17 +55,17 @@ Variable | Usage
 
 
 ```shell
-echo "CATCHALL_MAILBOX_PASSWORD='$(openssl rand -base64 18)'
+echo "CATCHALL_MAILBOX_PASSWORD=$(openssl rand -base64 18)
 CLIENT_CERT_EMAIL=user@example.org
-CLIENT_CERT_PASSWORD='$(openssl rand -base64 18)'
-CLIENT_CERT_USERNAME='John Doe'
-MYSQL_WEBDB_PASSWORD='$(openssl rand -base64 18)'
+CLIENT_CERT_PASSWORD=$(openssl rand -base64 18)
+CLIENT_CERT_USERNAME="John Doe"
+MYSQL_WEBDB_PASSWORD=$(openssl rand -base64 18)
 MYSQL_WEBDB_USER=cacert_dev
-MYSQL_CATS_PASSWORD='$(openssl rand -base64 18)'
+MYSQL_CATS_PASSWORD=$(openssl rand -base64 18)
 MYSQL_CATS_USER=cats
-MYSQL_MGR_PASSWORD='$(openssl rand -base64 18)'
+MYSQL_MGR_PASSWORD=$(openssl rand -base64 18)
 MYSQL_MGR_USER=cacert_mgr
-MYSQL_ROOT_PASSWORD='$(openssl rand -base64 18)'" | sed 's@/@_@g' > .env
+MYSQL_ROOT_PASSWORD=$(openssl rand -base64 18)" > .env
 ./setup_test_ca.sh
 docker-compose up
 ```

signer.Dockerfile

@@ -1,8 +1,10 @@
-FROM debian:jessie
+# should be etch or lenny but dockerhub doesn't have such old versions
+FROM debian:squeeze
 
-RUN apt-get update \
+RUN echo "deb http://archive.debian.org/debian squeeze main" > /etc/apt/sources.list ; \
+    apt-get -o=Acquire::AllowInsecureRepositories=true update \
     && DEBIAN_FRONTEND=noninteractive \
-    apt-get install -y --no-install-recommends \
+    apt-get -o=APT::Get::AllowUnauthenticated=true install -y --no-install-recommends \
     gnupg \
     libdevice-serialport-perl \
     libdigest-sha-perl \