Harbor docker login x509 certificate signed by unknown authority

前言

在CentOS7上用Harbor搭建好私有Docker registry并配置好HTTPS访问后，用docker login时出错：

Error response from daemon: Get https://192.168.37.170/v1/users/: x509: certificate signed by unknown authority

解决这个问题的简单方式就是仍然用insecure-registries方式，参见搭建Harbor镜像仓库 HTTP Insecure Registry的“配置Insecure Registry”部分。

或者让Docker信任我们自己生成的CA证书，类似在浏览器中导入并信任CA根证书。

生成的证书

文件名	说明
ca.crt	CA证书公钥
ca.key	CA证书密钥
harbor.crt	Harbor SSL证书公钥
harbor.key	Harbor SSL证书密钥

方法一

# 192.168.37.170为Habor hostname
mkdir -p /etc/docker/certs.d/192.168.37.170
cp ca.crt /etc/docker/certs.d/192.168.37.170systemctl restart docker

如果Docker daemon的方法不行，则参考下面的方法在操作系统级别导入并信任我们生成的CA证书。

方法二

cp ca.crt /etc/pki/ca-trust/source/anchorsupdate-ca-trust extractsystemctl restart docker

注意：是ca.crt，不是harbor.crt

方法三

cp ca.crt /etc/pki/tls/certs/ca.crt# backup ca-bundle.crt
cp -p ca-bundle.crt ca-bundle.crt.bakcat ca.crt >> /etc/pki/tls/certs/ca-bundle.crtsystemctl restart docker

注意：是ca.crt，不是harbor.crt

参考文档

https://github.com/goharbor/harbor/blob/master/docs/configure_https.md
https://manuals.gfi.com/en/kerio/connect/content/server-configuration/ssl-certificates/adding-trusted-root-certificates-to-the-server-1605.html
https://github.com/moby/moby/issues/8849
https://blog.csdn.net/hjmhz/article/details/81912315

Harbor docker login x509 certificate signed by unknown authority相关推荐

docker登录私库时提示 x509: certificate signed by unknown authority
docker登录私库时提示 x509: certificate signed by unknown authority 编辑daemon.json vim /etc/docker/daemon.jso ...
Docker在windows环境使用阿里云镜像 pull 报错 x509: certificate signed by unknown authority
本人使用的环境是 windows7 ,使用docker toolbox安装, 使用的是阿里云镜像,使用阿里云镜像相关操作阿里云上有操作步骤 https://cr.console.aliyun.com/ ...
x509: certificate signed by unknown authority (harbor)
最近在做Docker相关的东西,发现只要一pull镜像,就出现如下的ERROR x509: certificate signed by unknown authority. 调查后发现,是公司IT把h ...
docker-compose部署的服务访问https报错：x509: certificate signed by unknown authority
最近写了几个推特API的接口,在本机(mac)测试的时候好好的部署到服务器上的时候发现不能用了报错: {"code": 500,"msg": "e ...
kubectl get node运行时出现：Unable to connect to the server: x509: certificate signed by unknown authority
kubectl get nodes运行时出现:Unable to connect to the server: x509: certificate signed by unknown authorit ...
使用golang发送邮件，报错“x509: certificate signed by unknown authority”
问题描述使用golang发送邮件,报错"x509: certificate signed by unknown authority",这是由于客户端默认要对服务端传过来的数字证书 ...
x509: certificate signed by unknown authority (possibly because of “crypto/rsa: verification error“
执行下面命令初始化k8s集群时 kubeadm init --pod-network-cidr 10.21.0.0/16 \--image-repository registry.cn-hangzho ...
gomail发送邮件报:x509: certificate signed by unknown authority的解决方法
今天在项目上遇到一个问题,项目上使用gomail库进行邮件的发送,在自己电脑上测试是可以正常发送邮件的,但是要上线的前一天,进行了上线部署测试,结果发送邮件的功能一直报错,通过谷歌找到了解决方法. 报 ...
k8s系列之：Unable to connect to the server: x509: certificate signed by unknown authority
k8s系列之:Unable to connect to the server: x509: certificate signed by unknown authority K8s使用kubeadm r ...

Harbor docker login x509 certificate signed by unknown authority

文章目录

Harbor docker login x509 certificate signed by unknown authority

前言

生成的证书

方法一

方法二

方法三

参考文档

Harbor docker login x509 certificate signed by unknown authority相关推荐

最新文章

热门文章