Docker registry and mTLS client certs

Question

Try to use mTLS client certs with docker registry. I deployed standard registry from docker docs with port 5000. And external nginx with mTLS on port 443. Nginx check client cert and proxy traffic to registry container on port 5000. With curl it is works fine.

curl -k --key ssl/client.key --cert ssl/client.crt https://localhost/v2/ 
{"errors":[{"code":"UNAUTHORIZED","message":"authentication required","detail":null}]}

I put client certificates to /etc/docker/certs.d/localhost.

But i cant tell to docker login and pull from httpS://localhost. For example:

docker login --username a --password b localhost:443         
Error response from daemon: login attempt to http://localhost:443/v2/ failed with status: 400 Bad Request

It makes http request, not httpS. docker pull do this too.

How i make a force https auth with docker login and force https connection with docker pull?

I tried a force protocol write:

docker login --username a --password b https://localhost:443
Error response from daemon: login attempt to **http**://localhost:443/v2/ failed with status: 400 Bad Request

Tried to add localhost to insecure registries:

/etc/docker/daemon.json  

{"insecure-registries" : [ "localhost:443" ] }

Nothing help :(

Victor · Accepted Answer · 2024-07-25 12:14:02Z

0

{
  "insecure-registries" : [],
  "registry-mirrors": [],
  "debug": true,
  "experimental": false,
  "features": {
    "buildkit": true
  }
}

Try to update docker daemon configuration.

edited Jul 25, 2024 at 12:14

Victor

5371 gold badge3 silver badges16 bronze badges

answered Jul 25, 2024 at 11:25

VICTOR SANTOS

92 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Docker registry and mTLS client certs

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related