osx - docker login fails -> x509: certificate signed by unknown authority .. "crypto/rsa: verification error" -


i have created private docker registry fronted nginx. nginx ssl terminates.

i obfuscating domain using my-domain.com purpose of question.

i using osx 10.10.3 has boot2docker installed. should noted workflow of vagrant + coreos + docker shouldn't involve boot2docker since having issues within vm(coreos) , not host(osx).

i using vagrant spin local coreos vm box. ssh instance of vm , attempt issue following command

$ docker login docker.my-domain.com

i prompted username, password, email expected; , supply details.

note: able issue above command in host os (osx) expected , able login (generates ~/.dockercfg file).

i following error:

fata[0008] error response daemon: v1 ping attempt failed error: https://docker.my-domain.com/v1/_ping:  x509: certificate signed unknown authority (possibly because of "crypto/rsa: verification error" while trying  verify candidate authority certificate "*.my-domain.com"). if private registry supports http or https  unknown ca certificate, please add `--insecure-registry docker.my-domain.com` daemon's  arguments. in case of https, if have access registry's ca certificate, no need flag;  place ca certificate @ /etc/docker/certs.d/docker.my-domain.com/ca.crt

i have copied on ca.crt self signing. can confirm coreos able connect server on ssl. ran command

openssl s_client -cafile /etc/docker/certs.d/docker.my-domain.com/ca.crt -connect docker.my-domain.com:443

and expected 'verify return code: 0 (ok)'. leads me believe docker seems having problem. 

$ docker version (from within coreos vm) client version: 1.6.1-rc2 client api version: 1.18 go version (client): go1.4.2 git commit (client): 17f157d-dirty os/arch (client): linux/amd64 server version: 1.6.1-rc2 server api version: 1.18 go version (server): go1.4.2 git commit (server): 17f157d-dirty os/arch (server): linux/amd64

after this, not sure need try next. , appreciated!

this turned out 2 part issue. first issue when placed certificate file(ca.crt) in relative /etc/ssl/certs/ folder, didn't rename original file .pem extension. meant when ran the update-ca-certificates install custom certificate on client machine, wasn't getting recognized. hiding second , main issue.

i wasn't using correct certificate file. once used correct certificate file, , renamed file have .pem extension ran update-ca-certificates , issued login command , worked.

i assume mush have installed correct version of cert correctly on host osx machine, why worked there not in vm.


Comments

Post a Comment

Popular posts from this blog

Email notification in google apps script -

https://support.google.com/docs/answer/91588?hl=en i have sheet the cells filled in data pulled via apps script, website. pull in exact same data, not. on old sheets version use able emails when data "changes" different value. new sheets, email when new data pasted cells, though exact same data......and, can't set @ ranges anymore, entire document. there easy way watch cells when data changes, , email myself? this looks lot you're trying do. for checking whether value has changed after edit, this gives necessary information it. hence, know whether new value same 1 or not. implementing "workaround" talked in second link, able compare , send email myself if value changed. initiate onedit trigger goes off onedit function uses these lines after checks in place have passed. var email = "xyz@whatever.com"; mailapp.sendemail(email, "triggermail", "a change has occurred in sheet"); note: sends "notification...
Read more

c++ - Difference between pre and post decrement in recursive function argument -

i have following sample code used pre-decrement void function(int c) { if(c == 0) { return; } else { cout << "dp" << c << endl; function(--c); cout << c << endl; return; } } this function give output input 4 : dp3 dp2 dp1 dp0 0 1 2 3 but when use post decrement void function(int c) { if(c == 0) { return; } else { cout << "dp" << c << endl; function(c--); cout << c << endl; return; } } output goes in infinite loop dp4 can explain me in detail why happens ? this happens because function(c--) called same value of c , when finishes c decremented. recursively called, hence called same value no chance of return , hit stack overflow error. assume this, int x = 1, y = 0; y = x++ result y == 1 , x == 2. if y = ++x , bot x , y 2.
Read more

javascript - IE11 incompatibility with jQuery's 'readonly'? -

the code i'm running has no issues in firefox, or chrome. user typing 1 textbox, tabs next , can continue typing that. when run webpage on ie11, user tabs next textbox , can't type in. textbox has double-clicked before user can insert anything. i've googled , seems ie give problems when using older jquery (i.e. prefers 'prop' 'attr' ). in code below jquery's readonly keyword being used in way ie11 no longer recognise/accept? i assume issue readonly , removeclass('ignore') working expected. //when focus on textbox 1 $("#field1").focus(function() { //remove readonly property textbox 1 $('#field1').prop('readonly', false).removeclass('ignore'); //add readonly property other textboxes $('#field2, #field3, #field4') .prop('readonly', 'readonly').addclass('ignore').val(''); }); i'm using jquery 2.1.3 ...
Read more