{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/6072","labels_url":"https://api.github.com/repos/openshift/origin/issues/6072/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/6072/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/6072/events","html_url":"https://github.com/openshift/origin/issues/6072","id":118763680,"number":6072,"title":"Certificate signed by unknown authority","user":{"login":"deanpeterson","id":1156788,"avatar_url":"https://avatars.githubusercontent.com/u/1156788?v=3","gravatar_id":"","url":"https://api.github.com/users/deanpeterson","html_url":"https://github.com/deanpeterson","followers_url":"https://api.github.com/users/deanpeterson/followers","following_url":"https://api.github.com/users/deanpeterson/following{/other_user}","gists_url":"https://api.github.com/users/deanpeterson/gists{/gist_id}","starred_url":"https://api.github.com/users/deanpeterson/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/deanpeterson/subscriptions","organizations_url":"https://api.github.com/users/deanpeterson/orgs","repos_url":"https://api.github.com/users/deanpeterson/repos","events_url":"https://api.github.com/users/deanpeterson/events{/privacy}","received_events_url":"https://api.github.com/users/deanpeterson/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":13,"created_at":"2015-11-25T05:25:19Z","updated_at":"2015-11-26T04:27:54Z","closed_at":null,"body":"I purchased a PositiveSSL Wildfly certificate from Namecheap to secure my Openshift Registry.  I installed the certificate into my /etc/pki/tls/certs folder using \"update-ca-trust\".  When I run: \"openssl verify -CApath /etc/pki/tls/certs __example_com.crt\",   I get __example_com.crt: OK\r\n\r\nWhen I use a browser to go to the route of the registry I can see the certificate info and everything looks ok.  However, when I try to pull from the registry remotely I get an error saying the \"certificate is signed by unknown authority\".  I added the key and certificate to my route definition correctly for edge termination.  Do I need to do something else?  Does the certificate have to be installed somehow in Openshift's config directory?\r\n\r\nI know I can use --insecure-registry but I need to be able to secure the registry instead."},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/159801217","html_url":"https://github.com/openshift/origin/issues/6072#issuecomment-159801217","issue_url":"https://api.github.com/repos/openshift/origin/issues/6072","id":159801217,"user":{"login":"liggitt","id":980082,"avatar_url":"https://avatars.githubusercontent.com/u/980082?v=3","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false},"created_at":"2015-11-26T04:27:54Z","updated_at":"2015-11-26T04:27:54Z","body":"was there other info, like the cert chain presented? did it match on the remote and local machine?"}}