docker - 自签署ssl根证书 certificate signed by unknown authority

Question

我在内网一台服务器上搭建了私有CA中心来做自授权ssl证书，将生成的根证书导入浏览器后访问https没有再出现警告，但我在另外一台CentOS上使用curl https://username:password@my.domain.com:8000/也正常，但docker login https://my.domaian.com:8000/时报错：

certificate signed by unknown authority (possibly because of "crypto/rsa: 
verification error" while trying to verify candidate authority certificate "my.domain.com")

问题是，在centos上怎样做才能够信任这个自签署的根证书CA呢

Answer 1

docker에는 자체 인증서 저장 디렉터리가 있으며 경로는 /etc/docker/certs.d/입니다. 형식에 대한 자세한 내용은 공식 문서를 참조하세요: https://github.com/docker/docker/blob/master/docs/sources/articles/certificates.md

또한 운영 체제에 루트 인증서를 추가하는 다양한 방법:

http://kb.kerio.com/product/kerio-connect/server-configuration/ssl-certificates/adding-trusted-root-certificates-to-the-server-1605.html