Hi Kumar, Here's a link to the documentation for enabling support for insecure registries: https://github.com/joyent/sdc/blob/master/docs/operator-guide/configuration.md#sdc-application-configuration
You will need to set the docker_registry_insecure configuration variable in the sapi service. However, it isn't recommended for production deployments. On Fri, Mar 11, 2016 at 5:14 PM, Kumar, Suresh <[email protected]> wrote: > Hi there: > > I am trying to access our artifactory based private registry from a > SmartOS host using imgadm like: "imgadm -vvv sources -a > https://<my-registry-address>:5000 -t docker”. > > The registry uses a “self-signed” certificate and I downloaded the pem > file and installed at “/etc/certs/CA”. > > When I tried to add the source I get a DEPTH_ZERO_SELF_SIGNED_CERT error; > I tried with the IMGADM_INSECURE=1 and it did not help either. > > openssl verify /etc/certs/CA/<cert>.pem > <prints issuer info> > error 18 at 0 depth lookup:self signed certificate > OK > > Thanks for any clues. > > Suresh > > { > "name": "imgadm", > "req_id": "595acefc-ecb1-4bc3-ad0c-bf86fced0eee", > "hostname": “<hostname>", > "pid": 20177, > "component": "source", > "source": { > "type": "docker" > }, > "level": 10, > "err": { > "message": "DEPTH_ZERO_SELF_SIGNED_CERT", > "name": "Error", > "stack": "Error: DEPTH_ZERO_SELF_SIGNED_CERT\n at > SecurePair.<anonymous> (tls.js:1370:32)\n at > SecurePair.EventEmitter.emit (events.js:92:17)\n at > SecurePair.maybeInitFinished (tls.js:982:10)\n at CleartextStream.read > [as _read] (tls.js:469:13)\n at CleartextStream.Readable.read > (_stream_readable.js:320:10)\n at EncryptedStream.write [as _write] > (tls.js:366:25)\n at doWrite (_stream_writable.js:226:10)\n at > writeOrBuffer (_stream_writable.js:216:5)\n at > EncryptedStream.Writable.write (_stream_writable.js:183:11)\n at write > (_stream_readable.js:583:24)" > }, > "msg": "Request failed", > "time": "2016-03-12T00:39:52.890Z", > "src": { > "file": "/usr/img/node_modules/restify/lib/clients/http_client.js", > "line": 173, > "func": "onError" > }, > "v": 0 > } > *smartos-discuss* | Archives > <https://www.listbox.com/member/archive/184463/=now> > <https://www.listbox.com/member/archive/rss/184463/27862676-98b28ad9> | > Modify > <https://www.listbox.com/member/?&;> > Your Subscription <http://www.listbox.com> > -- -Elijah ------------------------------------------- smartos-discuss Archives: https://www.listbox.com/member/archive/184463/=now RSS Feed: https://www.listbox.com/member/archive/rss/184463/25769125-55cfbc00 Modify Your Subscription: https://www.listbox.com/member/?member_id=25769125&id_secret=25769125-7688e9fb Powered by Listbox: http://www.listbox.com
