https://wiki.williams-net.org/index.php?action=history&feed=atom&title=Docker_and_Self-Signed_Certificates 2026-06-01T02:38:05Z Revision history for this page on the wiki MediaWiki 1.40.1 https://wiki.williams-net.org/index.php?title=Docker_and_Self-Signed_Certificates&diff=181&oldid=prev 2019-12-31T19:48:13Z

<p>Created page with &quot;While it is possible to tell docker to ignore the fact that a registry is using self-signed certificates, it is just as easy to put the certificates in a place on the client s...&quot;</p> <p><b>New page</b></p><div>While it is possible to tell docker to ignore the fact that a registry is using self-signed certificates, it is just as easy to put the certificates in a place on the client system where docker can use them to authenticate the server as it likes to do. Assuming that the registry&#039;s self-signed certificates were created as described [[Creating a Self-Signed Certificate|here]], you have the certificate in a files called &#039;&#039;cert.pem&#039;&#039; and the key in a file called &#039;&#039;key.pem&#039;&#039;. The &lt;hostname&gt; used in the commands below must match &#039;&#039;&#039;&#039;&#039;EXACTLY&#039;&#039;&#039;&#039;&#039; the hostname provided when creating the keys.<br /> <br /> Docker allows local certificates to be placed in a directory on the client called &#039;&#039;/etc/docker/certs.d&#039;&#039;. The contents of this directory are a set of subdirectories -- one for each system to be authenticated -- that contain the cert/key files for that system. Using the certificate created above, issue these commands:<br /> <br /> sudo mkdir -p /etc/docker/certs.d/&lt;hostname&gt;<br /> sudo cp cert.pem /etc/docker/certs.d/&lt;hostname&gt;/domain.crt<br /> sudo cp cert.pem /etc/docker/certs.d/&lt;hostname&gt;/ca.crt<br /> sudo cp key.pem /etc/docker/certs.d/&lt;hostname&gt;/domain.key<br /> <br /> This must be done on any system that will be accessing the registry. Alternatively, the entire &lt;hostname&gt; subdirectly can be copied to the other systems using scp:<br /> <br /> sudo scp -r /etc/docker/certs.d/&lt;hostname&gt; &lt;client-hostname&gt;:/etc/docker/certs.d</div>

DrEdWilliams