Solve the problem of Mac Docker x509 certificate

question

Recently I needed to log in to a private mirror center, but an error message appeared when logging in:

Error response from daemon: Get https://***: x509: certificate signed by unknown authority

reason

The certificate of the private mirror center is not trustworthy, and you need to add the authentication certificate of the private mirror center.

Workaround

For example, if the authentication certificate of the private mirror center is ca.crt, execute the following command:

sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ca.crt

Just restart Docker.

Supplement: An article will help you solve the error when pulling images from Docker: x509: certificate has expired or is not yet valid

1. Problem Description

X509 error occurs when docker pulls the image:

2. Solution

When docker pulls an image, an x509 problem occurs. This is usually a certificate problem or a system time problem.

First check the time to see if it is correct. If the time does not match the actual time, it is usually a system time problem.

(1) Time problem solved: date error

Update time synchronization: ntpdate cn.pool.ntp.org

If the prompt says that the ntpdate command does not exist, you need to install it first: yum install ntpdate

After the time is updated, just pull it again:

(2) If it is a certificate problem, you need to edit the daemo.json file: vi /etc/docker/daemon.json

Add to the file:

{
"registry-mirrors": ["https://docker.mirrors.ustc.edu.cn"]
}

Then restart the docker service: docker restart

The above is my personal experience. I hope it can give you a reference. I also hope that you will support 123WORDPRESS.COM. If there are any mistakes or incomplete considerations, please feel free to correct me.