{"action":"created","issue":{"url":"https://api.github.com/repos/docker/docker/issues/9118","labels_url":"https://api.github.com/repos/docker/docker/issues/9118/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/9118/comments","events_url":"https://api.github.com/repos/docker/docker/issues/9118/events","html_url":"https://github.com/docker/docker/issues/9118","id":48503990,"number":9118,"title":"Docker Registry SSL CA cert failing to be read","user":{"login":"sthulb","id":103217,"avatar_url":"https://avatars.githubusercontent.com/u/103217?v=3","gravatar_id":"","url":"https://api.github.com/users/sthulb","html_url":"https://github.com/sthulb","followers_url":"https://api.github.com/users/sthulb/followers","following_url":"https://api.github.com/users/sthulb/following{/other_user}","gists_url":"https://api.github.com/users/sthulb/gists{/gist_id}","starred_url":"https://api.github.com/users/sthulb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sthulb/subscriptions","organizations_url":"https://api.github.com/users/sthulb/orgs","repos_url":"https://api.github.com/users/sthulb/repos","events_url":"https://api.github.com/users/sthulb/events{/privacy}","received_events_url":"https://api.github.com/users/sthulb/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/docker/docker/labels//dist/registry","name":"/dist/registry","color":"5319e7"},{"url":"https://api.github.com/repos/docker/docker/labels/Distribution","name":"Distribution","color":"e11d21"},{"url":"https://api.github.com/repos/docker/docker/labels/exp/expert","name":"exp/expert","color":"3B8686"},{"url":"https://api.github.com/repos/docker/docker/labels/kind/bug","name":"kind/bug","color":"FF8C94"},{"url":"https://api.github.com/repos/docker/docker/labels/Trust","name":"Trust","color":"009800"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":48,"created_at":"2014-11-12T12:16:26Z","updated_at":"2015-04-23T15:03:23Z","closed_at":null,"body":"Hi there,\r\n\r\n### Background\r\nA registry running behind a reverse proxy (Apache 2.2). The proxy is responsible for terminating SSL on port 443 using TLS. The SSL certificates in use are self-signed and we authenticate with client certificates.\r\n\r\n### Problem\r\nIn Docker 1.3.0, docker accepted our self signed certificates as long as they had been setup in `/etc/docker/certs.d/registry.host/{client.cert, client.key, registry.host.crt}`.\r\n\r\nIn Docker 1.3.1, the behaviour has changed to look for `/etc/docker/certs.d/registry.host/ca.crt` (which would be fine, if it actually read the file).\r\n\r\nas far as I can conclude, the ca certificate isn't read. I can `curl` my registry using the client certificates and the CA certificate fine.\r\n\r\nInstead of a connecting, I'm told to use `--insecure-registry` or put a CA cert in the \"correct\" place."},"comment":{"url":"https://api.github.com/repos/docker/docker/issues/comments/95617237","html_url":"https://github.com/docker/docker/issues/9118#issuecomment-95617237","issue_url":"https://api.github.com/repos/docker/docker/issues/9118","id":95617237,"user":{"login":"matthughes","id":173132,"avatar_url":"https://avatars.githubusercontent.com/u/173132?v=3","gravatar_id":"","url":"https://api.github.com/users/matthughes","html_url":"https://github.com/matthughes","followers_url":"https://api.github.com/users/matthughes/followers","following_url":"https://api.github.com/users/matthughes/following{/other_user}","gists_url":"https://api.github.com/users/matthughes/gists{/gist_id}","starred_url":"https://api.github.com/users/matthughes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/matthughes/subscriptions","organizations_url":"https://api.github.com/users/matthughes/orgs","repos_url":"https://api.github.com/users/matthughes/repos","events_url":"https://api.github.com/users/matthughes/events{/privacy}","received_events_url":"https://api.github.com/users/matthughes/received_events","type":"User","site_admin":false},"created_at":"2015-04-23T15:03:23Z","updated_at":"2015-04-23T15:03:23Z","body":"@bluefeet Try dropping /v2/.  I don't believe that is valid.  Client is going to try to append /v2/ first and then /v1/.  You're probably getting double /v2/v2/"}}