{"action":"created","issue":{"url":"https://api.github.com/repos/docker/docker/issues/22764","repository_url":"https://api.github.com/repos/docker/docker","labels_url":"https://api.github.com/repos/docker/docker/issues/22764/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/22764/comments","events_url":"https://api.github.com/repos/docker/docker/issues/22764/events","html_url":"https://github.com/docker/docker/issues/22764","id":155021945,"number":22764,"title":"docker for mac (native, not boot to docker): private registry certificate not trusted","user":{"login":"cjw296","id":632049,"avatar_url":"https://avatars.githubusercontent.com/u/632049?v=3","gravatar_id":"","url":"https://api.github.com/users/cjw296","html_url":"https://github.com/cjw296","followers_url":"https://api.github.com/users/cjw296/followers","following_url":"https://api.github.com/users/cjw296/following{/other_user}","gists_url":"https://api.github.com/users/cjw296/gists{/gist_id}","starred_url":"https://api.github.com/users/cjw296/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cjw296/subscriptions","organizations_url":"https://api.github.com/users/cjw296/orgs","repos_url":"https://api.github.com/users/cjw296/repos","events_url":"https://api.github.com/users/cjw296/events{/privacy}","received_events_url":"https://api.github.com/users/cjw296/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-05-16T12:44:02Z","updated_at":"2016-05-16T13:06:57Z","closed_at":null,"body":"---------------------------------------------------\r\nBUG REPORT INFORMATION\r\n---------------------------------------------------\r\n**Output of `docker version`:**\r\n\r\n```\r\n$ docker --version\r\nDocker version 1.11.1, build 5604cbe\r\n```\r\n\r\nDocker for Mac version is `Version 1.11.1-beta11 (build: 6974) 37559e5f6acd56a4810963acc7001e88f2d88017`\r\n\r\n**Output of `docker info`:**\r\n\r\n```\r\n$ docker info\r\nContainers: 0\r\n Running: 0\r\n Paused: 0\r\n Stopped: 0\r\nImages: 0\r\nServer Version: 1.11.1\r\nStorage Driver: aufs\r\n Root Dir: /var/lib/docker/aufs\r\n Backing Filesystem: extfs\r\n Dirs: 0\r\n Dirperm1 Supported: true\r\nLogging Driver: json-file\r\nCgroup Driver: cgroupfs\r\nPlugins: \r\n Volume: local\r\n Network: bridge null host\r\nKernel Version: 4.4.9-moby\r\nOperating System: Alpine Linux v3.3\r\nOSType: linux\r\nArchitecture: x86_64\r\nCPUs: 8\r\nTotal Memory: 1.954 GiB\r\nName: moby\r\nID: FG7W:RI4N:HCY4:5X3H:NNYO:VEEG:IMJC:D6AV:IVEM:2TNG:VQUK:WS6L\r\nDocker Root Dir: /var/lib/docker\r\nDebug mode (client): false\r\nDebug mode (server): true\r\n File Descriptors: 16\r\n Goroutines: 40\r\n System Time: 2016-05-16T12:36:24.498998148Z\r\n EventsListeners: 1\r\nRegistry: https://index.docker.io/v1/\r\n\r\n```\r\n\r\n**Additional environment details (AWS, VirtualBox, physical, etc.):**\r\n\r\nWe use a private registry that has an SSL cert that is signed by our internal CA.\r\nThis certificate authority is globally installed into the system keychain on mac and linux desktops.\r\n\r\n**Steps to reproduce the issue:**\r\n1. curls works fine: \r\n```\r\n$ curl https://<redacted>.com/v1/_ping\r\ntrue\r\n```\r\n2. Any docker commands do not:\r\n```\r\n$ docker pull <redacted>.com/<redacted>\r\nError response from daemon: Get https://<redacted>.com/v1/_ping: x509: certificate signed by unknown authority\r\n```\r\n**Describe the results you received:**\r\n\r\nx509: certificate signed by unknown authority\r\n\r\n**Describe the results you expected:**\r\n\r\nCertificate to be accepted as the CA's cert has been installed system-wide.\r\n\r\n**Additional information you deem important (e.g. issue happens only occasionally):**\r\n\r\ndocker works file on our Linux desktops, which similarly have the CA's cert globally installed."},"comment":{"url":"https://api.github.com/repos/docker/docker/issues/comments/219420247","html_url":"https://github.com/docker/docker/issues/22764#issuecomment-219420247","issue_url":"https://api.github.com/repos/docker/docker/issues/22764","id":219420247,"user":{"login":"cjw296","id":632049,"avatar_url":"https://avatars.githubusercontent.com/u/632049?v=3","gravatar_id":"","url":"https://api.github.com/users/cjw296","html_url":"https://github.com/cjw296","followers_url":"https://api.github.com/users/cjw296/followers","following_url":"https://api.github.com/users/cjw296/following{/other_user}","gists_url":"https://api.github.com/users/cjw296/gists{/gist_id}","starred_url":"https://api.github.com/users/cjw296/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cjw296/subscriptions","organizations_url":"https://api.github.com/users/cjw296/orgs","repos_url":"https://api.github.com/users/cjw296/repos","events_url":"https://api.github.com/users/cjw296/events{/privacy}","received_events_url":"https://api.github.com/users/cjw296/received_events","type":"User","site_admin":false},"created_at":"2016-05-16T13:06:57Z","updated_at":"2016-05-16T13:06:57Z","body":"This workaround to send the registry to be insecure worked for me:\r\n\r\nhttps://forums.docker.com/t/how-to-run-a-insecure-registry/9692\r\n\r\n...but I guess this bug becomes \"Docker for Mac\" should use the system certificate store for certificates to trust."}}