{"action":"closed","issue":{"url":"https://api.github.com/repos/SUSE/Portus/issues/1660","repository_url":"https://api.github.com/repos/SUSE/Portus","labels_url":"https://api.github.com/repos/SUSE/Portus/issues/1660/labels{/name}","comments_url":"https://api.github.com/repos/SUSE/Portus/issues/1660/comments","events_url":"https://api.github.com/repos/SUSE/Portus/issues/1660/events","html_url":"https://github.com/SUSE/Portus/issues/1660","id":294845959,"number":1660,"title":"OpenSSL::SSL::SSLError: could not stablish connection: SSL error.","user":{"login":"Nols1000","id":2102243,"avatar_url":"https://avatars2.githubusercontent.com/u/2102243?v=4","gravatar_id":"","url":"https://api.github.com/users/Nols1000","html_url":"https://github.com/Nols1000","followers_url":"https://api.github.com/users/Nols1000/followers","following_url":"https://api.github.com/users/Nols1000/following{/other_user}","gists_url":"https://api.github.com/users/Nols1000/gists{/gist_id}","starred_url":"https://api.github.com/users/Nols1000/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Nols1000/subscriptions","organizations_url":"https://api.github.com/users/Nols1000/orgs","repos_url":"https://api.github.com/users/Nols1000/repos","events_url":"https://api.github.com/users/Nols1000/events{/privacy}","received_events_url":"https://api.github.com/users/Nols1000/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":8,"created_at":"2018-02-06T17:27:59Z","updated_at":"2018-02-14T16:05:22Z","closed_at":"2018-02-14T16:05:22Z","author_association":"NONE","body":"Hi,\r\n\r\nI'm using portus and Registry/Distribution on a Docker-Swarm (currently just 1 node) and behind a [Docker Flow Proxy (HAProxy)](https://github.com/vfarcic/docker-flow-proxy). The Registry runs at port 443 with a certificated signed with my own CA. Portus runs at port 443 and subRoot '/portus'. \r\n\r\nWhen I try to setup the connection of the Registry and Portus it fails with \"OpenSSL::SSL::SSLError: could not stablish connection: SSL error. You can skip this check by clicking on the \"Skip remote checks\" checkbox.\".\r\n\r\nResponse of /portus/api/v1/registries/validate?name=Local+Registry&hostname=docker-registry01.local&external_hostname=&use_ssl=true&force=false&only%5B%5D=hostname:\r\n````json\r\n{\"messages\":{\"hostname\":[\"OpenSSL::SSL::SSLError: could not stablish connection: SSL error.\"]},\"valid\":false}\r\n````\r\n\r\nDocker-Compose File\r\n````yaml\r\nversion: '3'\r\n\r\nservices:\r\n  redis:\r\n    image: redis:alpine\r\n    command: redis-server /etc/redis/config.conf\r\n    networks:\r\n      - default\r\n    volumes:\r\n      - ./config/redis/config.conf:/etc/redis/config.conf\r\n\r\n  registry:\r\n    image: registry:2\r\n    depends_on:\r\n      - redis\r\n    networks:\r\n      - default\r\n      - proxy\r\n    ports:\r\n      - 5000\r\n    environment:\r\n      - REGISTRY_AUTH_TOKEN_REALM=https://docker-registry01.local/portus/v2/token\r\n      - REGISTRY_AUTH_TOKEN_SERVICE=docker-registry01.local\r\n      - REGISTRY_AUTH_TOKEN_ISSUER=docker-registry01.local\r\n      - REGISTRY_AUTH_TOKEN_ROOTCERTBUNDLE=/etc/ssl/certs/docker-registry01.local.crt\r\n      - REGISTRY_HTTP_SECRET=****\r\n      - REGISTRY_REDIS_ADDR=redis:6379\r\n      - REGISTRY_STORAGE_DELETE_ENABLED=true\r\n      - REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR=redis\r\n    volumes:\r\n      - ./data/registry:/var/lib/registry\r\n      - /etc/ssl/certs:/etc/ssl/certs:ro\r\n      - ./config/registry/config.yml:/etc/docker/registry/config.yml\r\n    deploy:\r\n      replicas: 1\r\n      labels:\r\n        - com.df.notify=true\r\n        - com.df.port=5000\r\n        - com.df.serviceDomain=docker-registry01.local\r\n\r\n  mariadb:\r\n    image: library/mariadb:10.0.23\r\n    networks:\r\n      - default\r\n    ports:\r\n      - 3306\r\n    environment:\r\n      MYSQL_ROOT_PASSWORD: ****\r\n    volumes:\r\n      - ./data/mysql:/var/lib/mysql\r\n\r\n  portus:\r\n    image: opensuse/portus:2.3\r\n    depends_on:\r\n      - mariadb\r\n    networks:\r\n      - default\r\n      - proxy\r\n    ports:\r\n      - 3000\r\n    environment:\r\n      RAILS_SERVE_STATIC_FILES: 'true'\r\n      RAILS_RELATIVE_URL_ROOT: /portus\r\n      PORTUS_DB_HOST: mariadb\r\n      PORTUS_DB_USERNAME: ****\r\n      PORTUS_DB_PASSWORD: ****\r\n      PORTUS_DB_DATABASE: ****\r\n      PORTUS_DELETE_ENABLED: 'true'\r\n      PORTUS_MACHINE_FQDN_VALUE: docker-registry01.local\r\n      PORTUS_CHECK_SSL_USAGE_ENABLED: 'false'\r\n      PORTUS_SECRET_KEY_BASE: ****\r\n      PORTUS_KEY_PATH: /certificates/docker-registry01.local.key\r\n      PORTUS_PASSWORD: ****\r\n      PORTUS_SIGNUP_ENABLED: 'false'\r\n    volumes:\r\n      - ./config/portus:/etc/portus\r\n      - ./secrets:/certificates:ro\r\n    deploy:\r\n      replicas: 1\r\n      labels:\r\n        - com.df.notify=true\r\n        - com.df.port=3000\r\n        - com.df.servicePath=/portus\r\n        - com.df.serviceDomain=docker-registry01.local\r\n\r\n#  portus-background:\r\n#    image: opensuse/portus:latest\r\n#    entrypoint: bundle exec rails runner /svr/Portus/bin/background.rb\r\n#    networks:\r\n#      - default\r\n#    depends_on:\r\n#      - portus\r\n#      - mariadb\r\n#    environment:\r\n#      - PORTUS_DB_HOST=mariadb\r\n#      - PORTUS_DB_USERNAME=****\r\n#      - PORTUS_DB_PASSWORD=****\r\n#      - PORTUS_DB_DATABASE=****\r\n\r\n\r\nnetworks:\r\n  default:\r\n    external: false\r\n  proxy:\r\n    external: true\r\n````\r\n\r\nPortus Logs (NOTE `PORTUS_LOG_LEVEL: debug` does not provide more relevant information):\r\n````\r\nStarted GET \"/portus/admin/registries/1/edit\" for 10.0.0.10 at 2018-02-06 17:01:12 +0000\r\nProcessing by Admin::RegistriesController#edit as HTML\r\n  Parameters: {\"id\"=>\"1\"}\r\n  Rendered admin/registries/components/_form.html.slim (2.7ms)\r\n  Rendered admin/registries/edit.html.slim within layouts/application (3.3ms)\r\n  Rendered shared/_header.html.slim (0.9ms)\r\n  Rendered shared/_aside.html.slim (0.7ms)\r\n  Rendered shared/_search.html.slim (0.2ms)\r\n  Rendered shared/_notification.html.slim (0.1ms)\r\n  Rendered shared/_notifications.html.slim (0.2ms)\r\nCompleted 200 OK in 12ms (Views: 7.8ms | ActiveRecord: 0.9ms)\r\nStarted GET \"/portus/api/v1/registries/validate?name=Local+Registry&hostname=doc&external_hostname=&use_ssl=false&force=false&only%5B%5D=hostname\" for 10.0.0.10 at 2018-02-06 17:01:17 +0000\r\nSocketError: connection refused.\r\nStarted GET \"/portus/api/v1/registries/validate?name=Local+Registry&hostname=do&external_hostname=&use_ssl=false&force=false&only%5B%5D=hostname\" for 10.0.0.10 at 2018-02-06 17:01:18 +0000\r\nSocketError: connection refused.\r\nStarted GET \"/portus/api/v1/registries/validate?name=Local+Registry&hostname=docke&external_hostname=&use_ssl=false&force=false&only%5B%5D=hostname\" for 10.0.0.10 at 2018-02-06 17:01:20 +0000\r\nSocketError: connection refused.\r\nStarted GET \"/portus/api/v1/registries/validate?name=Local+Registry&hostname=docker-registry01.local&external_hostname=&use_ssl=false&force=false&only%5B%5D=hostname\" for 10.0.0.10 at 2018-02-06 17:01:23 +0000\r\nStarted GET \"/portus/api/v1/registries/validate?name=Local+Registry&hostname=docker-registry01.local&external_hostname=&use_ssl=true&force=false&only%5B%5D=hostname\" for 10.0.0.10 at 2018-02-06 17:01:25 +0000\r\nOpenSSL::SSL::SSLError: could not stablish connection: SSL error.\r\n````\r\n\r\nPortus Information:\r\n````yaml\r\n[Mailer config] Host:     portus.test.lan\r\n[Mailer config] Protocol: https://\r\nEvaluated configuration:\r\n---\r\nemail:\r\n  from: portus@example.com\r\n  name: Portus\r\n  reply_to: no-reply@example.com\r\n  smtp:\r\n    enabled: false\r\n    address: smtp.example.com\r\n    port: 587\r\n    user_name: username@example.com\r\n    password: \"****\"\r\n    domain: example.com\r\ngravatar:\r\n  enabled: true\r\ndelete:\r\n  enabled: true\r\nldap:\r\n  enabled: false\r\n  hostname: ldap_hostname\r\n  port: 389\r\n  method: plain\r\n  base: ''\r\n  filter: ''\r\n  uid: uid\r\n  authentication:\r\n    enabled: false\r\n    bind_dn: ''\r\n    password: \"****\"\r\n  guess_email:\r\n    enabled: false\r\n    attr: ''\r\noauth:\r\n  google_oauth2:\r\n    enabled: false\r\n    id: ''\r\n    secret: ''\r\n    domain: ''\r\n    options:\r\n      hd: ''\r\n  open_id:\r\n    enabled: false\r\n    identifier: ''\r\n    domain: ''\r\n  github:\r\n    enabled: false\r\n    client_id: ''\r\n    client_secret: ''\r\n    organization: ''\r\n    team: ''\r\n    domain: ''\r\n  gitlab:\r\n    enabled: false\r\n    application_id: ''\r\n    secret: ''\r\n    group: ''\r\n    domain: ''\r\n    server: ''\r\n  bitbucket:\r\n    enabled: false\r\n    key: ''\r\n    secret: ''\r\n    domain: ''\r\n    options:\r\n      team: ''\r\nfirst_user_admin:\r\n  enabled: true\r\nsignup:\r\n  enabled: false\r\ncheck_ssl_usage:\r\n  enabled: false\r\nregistry:\r\n  jwt_expiration_time:\r\n    value: 5\r\n  catalog_page:\r\n    value: 100\r\n  timeout:\r\n    value: 2\r\n  read_timeout:\r\n    value: 120\r\nmachine_fqdn:\r\n  value: docker-registry01.local\r\ndisplay_name:\r\n  enabled: false\r\nuser_permission:\r\n  change_visibility:\r\n    enabled: true\r\n  create_team:\r\n    enabled: true\r\n  manage_team:\r\n    enabled: true\r\n  create_namespace:\r\n    enabled: true\r\n  manage_namespace:\r\n    enabled: true\r\nsecurity:\r\n  clair:\r\n    server: ''\r\n    health_port: 6061\r\n  zypper:\r\n    server: ''\r\n  dummy:\r\n    server: ''\r\nanonymous_browsing:\r\n  enabled: true\r\n\r\nPortus version: 2.3.0@6c27eb83e3b23b12ce62d39e6823ec8cf5747921\r\n````\r\n\r\nNOTE: I've replaced my domain name with docker-registry01.local."}}
{"actor":{"display_login":"mssola"}}