mirror of
https://github.com/docker/docs.git
synced 2026-11-05 00:14:17 +03:00
1df80ba111
When attempting to connect to the docker api from the machine itself, the TLS verification of the certificate checked against the public IP address of the primary interface. This is undesirable on hosts which have NAT rules that block access to that address by default. Adding "localhost" to the list of alt_names allows the cert to be verified and connections to localhost (either 127.0.0.1 or [::1]) to the port to pass verification. Otherwise one would need to disable verification just to connect to the local docker instance. Signed-off-by: David Gageot <david@gageot.net>