Adding private root cert to Photon VM
Nobody has claimed this yet.
- Dominant language
- C
- Stars
- 3.2k
- Forks
- 692
- PR merge metrics
- No merged PRs in 30d
Description
Hello,
We are trying to add our private CA cert bundle to the server but getting the below error. I have added cert to /etc/ssl/certs and executed rehash_ca_certificates.sh
rehash_ca_certificates.sh
rehash: warning: skipping CA-Bundle.pem,it does not contain exactly one certificate or CRL
I have tried separating the certs in the bundle and adding them individually, when I ran rehash it dint through any warnings but when I try docker login to our private repo getting the below error.
Error response from daemon: Get "https://artifactory.org/v2/": x509: certificate signed by unknown authority
If I curl the url it works without issue, only docker login is failing. For now, I'm using insecure-registry flag.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with /etc/ssl/certs and rehash_ca_certificates.sh, then compare the trust store used by curl with the one used by docker login. Reproduce the private-registry login failure and determine what Photon VM configuration is missing; done means docker login trusts the private CA without insecure-registry.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker
- Domain
- operating-systems, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100