rework dockerfile; remove godebug

testutil/mssqlhelper.go

@@ -39,14 +39,14 @@ USER root
 ENV MSDIR=/var/opt/mssql
 RUN mkdir -p $MSDIR \
     && openssl req -x509 -nodes -newkey rsa:2048 -subj '/CN=mssql' -addext "subjectAltName = DNS:mssql" -keyout $MSDIR/mssql.key -out $MSDIR/mssql.pem -days 1 \
-	&& chmod 400 $MSDIR/mssql.key \
-	&& chmod 400 $MSDIR/mssql.pem \
+	&& chmod 400 /etc/ssl/private/mssql.key \
+	&& chmod 400 /etc/ssl/certs/mssql.pem \
     && chown -R mssql $MSDIR
 RUN echo "[network]" > $MSDIR/mssql.conf \
-	&& echo "tlscert = $MSDIR/mssql.pem" >> $MSDIR/mssql.conf \
-	&& echo "tlskey = $MSDIR/mssql.key" >> $MSDIR/mssql.conf \ 
-	&& echo "tlsprotocols = 1.2" >> $MSDIR/mssql.conf \ 
-	&& echo "forceencryption = 1" >> $MSDIR/mssql.conf 
+	&& echo "tlskey = /etc/ssl/private/mssql.key" >> $MSDIR/mssql.conf \
+	&& echo "tlscert = /etc/ssl/certs/mssql.pem" >> $MSDIR/mssql.conf \
+	&& echo "tlsprotocols = 1.2" >> $MSDIR/mssql.conf \
+	&& echo "forceencryption = 1" >> $MSDIR/mssql.conf
 USER mssql
 `
 	bCtx := docker.NewBuildContext()

vault/resource_database_secret_backend_connection_test.go

@@ -1,11 +1,6 @@
-//go:debug x509negativeserial=1
-
 // Copyright (c) HashiCorp, Inc.
 // SPDX-License-Identifier: MPL-2.0
 
-// NOTE: x509negativeserial above is a workaround for /~https://github.com/microsoft/mssql-docker/issues/895 which manifests in our tests as
-// tls: failed to parse certificate from server: x509: negative serial number in test case failures.
-
 package vault
 
 import (