Is "apk add openssl" or copying /etc/ssl/openssl.cnf missing from the Dockerfile?
If the container is supposed to be built with fips.so and fipsmodule.cnf for fips 3.0.9 support, and allow the user to add openssl on their own, it looks like openssl.cnf should be copied as well (COPY --from=build /etc/ssl/openssl.cnf /etc/ssl/openssl.cnf), since it's being modified in the next section:
`
sed -i 's/^default\s=\sdefault_sect/# default = default_sect/' /etc/ssl/openssl.cnf && \
sed -i 's/^#\s.include\sfipsmodule.cnf/.include /etc/ssl/fipsmodule.cnf/' /etc/ssl/openssl.cnf && \
sed -i 's/^#\sfips\s=\sfips_sect/fips = fips_sect\nbase = base_sect\n\n[base_sect]\nactivate=1/' /etc/ssl/openssl.cnf && \
`
If openssl is supposed to be installed during the container build, then should it possibly come before apk update &&\
?
Then copying openssl.cnf wouldn't be necessary.