Docker Community Forums

Share and learn in the Docker community.

Regenerate new certificate for docker registry


(Fcastro86) #1

Hello, sorry if the question is too obvious, however I’m not that familiar with docker and today got the following error:

x509: certificate has expired or is not yet valid

So my first guess what the certificate used by docker could be expired:

openssl s_client -connect localhost:5000 | grep “Not After”

notAfter=May 9 14:55:39 2018 GMT

For what I was able to understand is that the certificates for docker are in /etc/docker/certs.d/ but I’m starting to believe that they are only for the client side.

I have a new certificate signed, however I’m not sure where or how to install it. I’ve read a few guides, however seems like most is for newer versions. My current version:

docker-1.12.6-11.el7.x86_64

My main question is how can I figure it out where the certificates are picked from? are they automatically picked them out from a folder or is there a process that needs to be run to update those?

Thanks in advance!