[survey-web/oscp] ipa-ca has to be trusted for ldaps to work as expected

[Andrea Veri <averi src gnome org>]

commit 435ea5120c52bed5ce63c74bee5dcfad319bf198
Author: Andrea Veri <averi redhat com>
Date:   Wed May 15 22:42:14 2019 +0200

    ipa-ca has to be trusted for ldaps to work as expected

 docker/Dockerfile |  3 +++
 docker/ipa-ca.crt | 21 +++++++++++++++++++++
 2 files changed, 24 insertions(+)
---
diff --git a/docker/Dockerfile b/docker/Dockerfile
index 8c1a1d5..54d5f21 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -14,6 +14,9 @@ RUN tar -C /app -xf /app/limesurvey.tar.gz
 RUN rm /app/limesurvey.tar.gz
 COPY config.php /app/limesurvey/application/config/
 
+COPY ipa-ca.crt /etc/pki/ca-trust/source/anchors
+RUN update-ca-trust
+
 RUN rm /etc/httpd/conf.d/welcome.conf
 COPY 00_surveys.gnome.org.conf /etc/httpd/conf.d
 
diff --git a/docker/ipa-ca.crt b/docker/ipa-ca.crt
new file mode 100644
index 0000000..9f14f84
--- /dev/null
+++ b/docker/ipa-ca.crt
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----