add openssl verify check

Author: AlexFenlon

.github/workflows/build-base-images.yml

@@ -140,6 +140,7 @@ jobs:
           echo "::add-mask::$PLUS_CREDS"
           echo $PLUS_CREDS | jq -r '.crt' > nginx-repo.crt
           echo $PLUS_CREDS | jq -r '.key' > nginx-repo.key
+          openssl x509 -text -in nginx-repo.crt -noout
 
       - name: Docker Buildx
         uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1

build/Dockerfile

@@ -182,6 +182,10 @@ ARG NGINX_AGENT_VERSION
 
 ENV NGINX_VERSION=${NGINX_PLUS_VERSION}
 
+RUN --mount=type=secret,id=nginx-repo.crt,dst=/etc/apk/cert.pem,mode=0644 \
+	--mount=type=secret,id=nginx-repo.key,dst=/etc/apk/cert.key,mode=0644 \
+    openssl x509 -text -in /etc/apk/cert.pem -noout
+
 RUN --mount=type=secret,id=nginx-repo.crt,dst=/etc/apk/cert.pem,mode=0644 \
 	--mount=type=secret,id=nginx-repo.key,dst=/etc/apk/cert.key,mode=0644 \
 	--mount=type=bind,from=nginx-files,src=nginx_signing.rsa.pub,target=/etc/apk/keys/nginx_signing.rsa.pub \