{"action":"created","issue":{"url":"https://api.github.com/repos/docker/docker/issues/25682","repository_url":"https://api.github.com/repos/docker/docker","labels_url":"https://api.github.com/repos/docker/docker/issues/25682/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/25682/comments","events_url":"https://api.github.com/repos/docker/docker/issues/25682/events","html_url":"https://github.com/docker/docker/issues/25682","id":171007818,"number":25682,"title":"Error response from daemon \"crypto/rsa: verification error\" while accessing registry using auth and tls","user":{"login":"ashishjain14","id":11222204,"avatar_url":"https://avatars.githubusercontent.com/u/11222204?v=3","gravatar_id":"","url":"https://api.github.com/users/ashishjain14","html_url":"https://github.com/ashishjain14","followers_url":"https://api.github.com/users/ashishjain14/followers","following_url":"https://api.github.com/users/ashishjain14/following{/other_user}","gists_url":"https://api.github.com/users/ashishjain14/gists{/gist_id}","starred_url":"https://api.github.com/users/ashishjain14/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ashishjain14/subscriptions","organizations_url":"https://api.github.com/users/ashishjain14/orgs","repos_url":"https://api.github.com/users/ashishjain14/repos","events_url":"https://api.github.com/users/ashishjain14/events{/privacy}","received_events_url":"https://api.github.com/users/ashishjain14/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/docker/docker/labels/version/1.12","name":"version/1.12","color":"ededed"}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-08-13T12:54:20Z","updated_at":"2016-08-16T04:54:29Z","closed_at":"2016-08-13T14:55:23Z","body":"<!--\r\nIf you are reporting a new issue, make sure that we do not have any duplicates\r\nalready open. You can ensure this by searching the issue list for this\r\nrepository. If there is a duplicate, please close your issue and add a comment\r\nto the existing issue instead.\r\n\r\nIf you suspect your issue is a bug, please edit your issue description to\r\ninclude the BUG REPORT INFORMATION shown below. If you fail to provide this\r\ninformation within 7 days, we cannot debug your issue and will close it. We\r\nwill, however, reopen it if you later provide the information.\r\n\r\nFor more information about reporting issues, see\r\nhttps://github.com/docker/docker/blob/master/CONTRIBUTING.md#reporting-other-issues\r\n\r\n---------------------------------------------------\r\nBUG REPORT INFORMATION\r\n---------------------------------------------------\r\nUse the commands below to provide key information from your environment:\r\nYou do NOT have to include this information if this is a FEATURE REQUEST\r\n-->\r\n\r\n**Output of `docker version`:**\r\n\r\n```\r\nClient:\r\n Version:      1.12.0\r\n API version:  1.24\r\n Go version:   go1.6.3\r\n Git commit:   8eab29e\r\n Built:        Thu Jul 28 22:00:36 2016\r\n OS/Arch:      linux/amd64\r\n\r\nServer:\r\n Version:      1.12.0\r\n API version:  1.24\r\n Go version:   go1.6.3\r\n Git commit:   8eab29e\r\n Built:        Thu Jul 28 22:00:36 2016\r\n OS/Arch:      linux/amd64\r\n\r\n```\r\n\r\n\r\n**Output of `docker info`:**\r\n\r\n```\r\nContainers: 0\r\n Running: 0\r\n Paused: 0\r\n Stopped: 0\r\nImages: 1\r\nServer Version: 1.12.0\r\nStorage Driver: devicemapper\r\n Pool Name: docker-202:1-149183-pool\r\n Pool Blocksize: 65.54 kB\r\n Base Device Size: 10.74 GB\r\n Backing Filesystem: ext4\r\n Data file: /dev/loop0\r\n Metadata file: /dev/loop1\r\n Data Space Used: 307.6 MB\r\n Data Space Total: 107.4 GB\r\n Data Space Available: 6.981 GB\r\n Metadata Space Used: 753.7 kB\r\n Metadata Space Total: 2.147 GB\r\n Metadata Space Available: 2.147 GB\r\n Thin Pool Minimum Free Space: 10.74 GB\r\n Udev Sync Supported: true\r\n Deferred Removal Enabled: false\r\n Deferred Deletion Enabled: false\r\n Deferred Deleted Device Count: 0\r\n Data loop file: /var/lib/docker/devicemapper/devicemapper/data\r\n WARNING: Usage of loopback devices is strongly discouraged for production use. Use `--storage-opt dm.thinpooldev` to specify a custom block storage device.\r\n Metadata loop file: /var/lib/docker/devicemapper/devicemapper/metadata\r\n Library Version: 1.02.77 (2012-10-15)\r\nLogging Driver: json-file\r\nCgroup Driver: cgroupfs\r\nPlugins:\r\n Volume: local\r\n Network: host null bridge overlay\r\nSwarm: inactive\r\nRuntimes: runc\r\nDefault Runtime: runc\r\nSecurity Options: apparmor\r\nKernel Version: 3.13.0-92-generic\r\nOperating System: Ubuntu 14.04.4 LTS\r\nOSType: linux\r\nArchitecture: x86_64\r\nCPUs: 1\r\nTotal Memory: 992.5 MiB\r\nName: xxxxxxxxxx\r\nID: AD22:WPB5:ZKMQ:4YW7:GYRI:JLQI:TOJD:YS5M:4NIR:3WNR:66HW:FOYF\r\nDocker Root Dir: /var/lib/docker\r\nDebug Mode (client): false\r\nDebug Mode (server): false\r\nRegistry: https://index.docker.io/v1/\r\nWARNING: No swap limit support\r\nInsecure Registries:\r\n 127.0.0.0/8\r\n\r\n```\r\n\r\n**Additional environment details (AWS, VirtualBox, physical, etc.):**\r\nEnvironment : AWS\r\n\r\n\r\n**Steps to reproduce the issue:**\r\n1. Set up a secure docker registry with auth & tls\r\n2. Set up cessanta docker auth server \r\n3. Do Not set --insecure-registry option in DOCKER_OPTS\r\n4. docker push or pull fails with the following error\r\nError response from daemon: Get https://xxxxxxxxxxxx:5000/v2/: Get https://xxxxxxxxxxx:5001/auth?account=admin&client_id=docker&offline_token=true&service=Docker+registry: x509: certificate signed by unknown authority (possibly because of \"crypto/rsa: verification error\" while trying to verify candidate authority certificate \"xxxxxxxxxxx\")\r\n5. If I set up --insecure-registry it works without any issues"},"comment":{"url":"https://api.github.com/repos/docker/docker/issues/comments/240000895","html_url":"https://github.com/docker/docker/issues/25682#issuecomment-240000895","issue_url":"https://api.github.com/repos/docker/docker/issues/25682","id":240000895,"user":{"login":"ashishjain14","id":11222204,"avatar_url":"https://avatars.githubusercontent.com/u/11222204?v=3","gravatar_id":"","url":"https://api.github.com/users/ashishjain14","html_url":"https://github.com/ashishjain14","followers_url":"https://api.github.com/users/ashishjain14/followers","following_url":"https://api.github.com/users/ashishjain14/following{/other_user}","gists_url":"https://api.github.com/users/ashishjain14/gists{/gist_id}","starred_url":"https://api.github.com/users/ashishjain14/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ashishjain14/subscriptions","organizations_url":"https://api.github.com/users/ashishjain14/orgs","repos_url":"https://api.github.com/users/ashishjain14/repos","events_url":"https://api.github.com/users/ashishjain14/events{/privacy}","received_events_url":"https://api.github.com/users/ashishjain14/received_events","type":"User","site_admin":false},"created_at":"2016-08-16T04:54:29Z","updated_at":"2016-08-16T04:54:29Z","body":"I am following the link since this is a self signed certificate. https://docs.docker.com/registry/insecure/#/using-self-signed-certificates\r\nYes the certificates are present in /etc/docker/certs.d/registryHost:registryPort/. I have also added the certificate to /usr/local/share/ca-certificates and have run update. \r\n\r\nThis issue I suspect is coming from docker client unable to recoganize the auth server certificate. Once I enable a http connection with auth server I could see things working. The auth-server certificate is very well present in /usr/local/share/ca-certificates.\r\n\r\n"}}
{"actor":{"display_login":"ashishjain14"}}