From cfcdc63d52c2a8513b5ae986380e368f7f4e22c2 Mon Sep 17 00:00:00 2001 From: Ben Bodenmiller Date: Sun, 21 Aug 2016 22:43:42 -0700 Subject: [PATCH] document how to install registry custom CA Signed-off-by: Ben Bodenmiller --- docs/concepts.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/docs/concepts.md b/docs/concepts.md index e67bf009ad..eb2ebb4366 100644 --- a/docs/concepts.md +++ b/docs/concepts.md @@ -42,6 +42,22 @@ subcommand outputs the configuration command you should use. For a complete list of `docker-machine` subcommands, see the [Docker Machine subcommand reference](reference/index.md). +## Custom root Certificate Authority for Registry + +Users using their own Docker Registry will experience `x509: certificate signed by unknown authority` +error messages if their registry is signed by custom root Certificate Authority and it is +not registered with Docker Engine. As discussed in the [Docker Engine documentation](https://docs.docker.com/engine/security/certificates/#/understanding-the-configuration) +certificates should be placed at `/etc/docker/certs.d/hostname/ca.crt` +where `hostname` is your Registry server's hostname. + +```console +docker-machine scp certfile default:ca.crt +docker-machine ssh default +sudo mv ~/ca.crt /etc/docker/certs.d/hostname/ca.crt +exit +docker-machine restart +``` + ## Crash Reporting Provisioning a host is a complex matter that can fail for a lot of reasons. Your