{"action":"opened","issue":{"url":"https://api.github.com/repos/docker/docker/issues/10150","labels_url":"https://api.github.com/repos/docker/docker/issues/10150/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/10150/comments","events_url":"https://api.github.com/repos/docker/docker/issues/10150/events","html_url":"https://github.com/docker/docker/issues/10150","id":54635598,"number":10150,"title":"Certificate error with \"docker login\"","user":{"login":"rhasselbaum","id":2018107,"avatar_url":"https://avatars.githubusercontent.com/u/2018107?v=3","gravatar_id":"","url":"https://api.github.com/users/rhasselbaum","html_url":"https://github.com/rhasselbaum","followers_url":"https://api.github.com/users/rhasselbaum/followers","following_url":"https://api.github.com/users/rhasselbaum/following{/other_user}","gists_url":"https://api.github.com/users/rhasselbaum/gists{/gist_id}","starred_url":"https://api.github.com/users/rhasselbaum/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rhasselbaum/subscriptions","organizations_url":"https://api.github.com/users/rhasselbaum/orgs","repos_url":"https://api.github.com/users/rhasselbaum/repos","events_url":"https://api.github.com/users/rhasselbaum/events{/privacy}","received_events_url":"https://api.github.com/users/rhasselbaum/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-01-16T22:58:25Z","updated_at":"2015-01-16T22:58:25Z","closed_at":null,"body":"I'm setting up a private registry with a front-end Apache server serving as an SSL/TLS and Basic Auth proxy. I have a signed certificate for the Apache server. I placed the CA certificate in `/etc/docker/certs.d/<redacted>/ca.crt`.\r\n\r\nAll this works fine for `docker push` and `docker pull`. I see SSL connections being made. However, `docker login` fails with this error in the client:\r\n\r\n```\r\nFATA[0004] Error response from daemon: Server Error: Post https://<redacted>/v1/users/: x509: certificate signed by unknown authority\r\n```\r\n\r\nAnd I see the following in the daemon log:\r\n\r\n```\r\nDEBU[5219] Calling POST /auth                           \r\nINFO[5219] POST /v1.16/auth                             \r\nINFO[5219] +job auth()                                  \r\nDEBU[5219] hostDir: /etc/docker/certs.d/<redacted> \r\nDEBU[5219] crt: /etc/docker/certs.d/<redacted>:443/ca.crt \r\nDEBU[5219] RegistryInfo.Version: \"\"                     \r\nDEBU[5219] Registry standalone header: 'True'           \r\nDEBU[5219] RegistryInfo.Standalone: true                \r\nDEBU[5219] hostDir: /etc/docker/certs.d/<redacted> \r\nDEBU[5219] crt: /etc/docker/certs.d/<redacted>/ca.crt \r\nDEBU[5219] RegistryInfo.Version: \"\"                     \r\nDEBU[5219] Registry standalone header: 'True'           \r\nDEBU[5219] RegistryInfo.Standalone: true                \r\nServer Error: Post https://<redacted>/v1/users/: x509: certificate signed by unknown authority\r\nINFO[5219] -job auth() = ERR (1)                        \r\nERRO[5219] Handler for POST /auth returned error: Server Error: Post https://<redacted>/v1/users/: x509: certificate signed by unknown authority \r\nERRO[5219] HTTP Error: statusCode=500 Server Error: Post https://<redacted>/v1/users/: x509: certificate signed by unknown authority \r\n```\r\n\r\nI **know** it's reading the CA file because if I rename it, `docker pull` stops working. What would cause `docker pull` to work fine but `docker login` to fail with a certificate error? Here is my version info:\r\n\r\n```\r\nClient version: 1.4.1\r\nClient API version: 1.16\r\nGo version (client): go1.3.3\r\nGit commit (client): 5bc2ff8\r\nOS/Arch (client): linux/amd64\r\nServer version: 1.4.1\r\nServer API version: 1.16\r\nGo version (server): go1.3.3\r\nGit commit (server): 5bc2ff8\r\n```"}}