Docker推送artifactory

我正在尝试创build一个本地docker仓库，我可以把我的图片放入。为此，我已经完成了以下步骤

使用SSLconfigurationnginxconfigurationnginx，以便将docker local repo与服务器名称绑定以下是我的nginxconfiguration

upstream artifactory_lb { server myLb.company.com:8081; server myLb.company.com:8081 backup; } log_format upstreamlog '[$time_local] $remote_addr - $remote_user - $server_name to: $upstream_addr: $request upstream_response_time $upstream_response_time msec $msec request_time $request_time'; server { listen 80; listen 443 ssl; ssl_certificate /etc/nginx/ssl/my-certs/myCert.pem; ssl_certificate_key /etc/nginx/ssl/my-certs/myserver.key; client_max_body_size 2048M; location / { proxy_set_header Host $host:$server_port; proxy_pass http://artifactory_lb; proxy_read_timeout 90; } access_log /var/log/nginx/access.log upstreamlog; location /basic_status { stub_status on; allow all; } } # Server configuration server { listen 2222 ssl; server_name myLb.company.com; if ($http_x_forwarded_proto = '') { set $http_x_forwarded_proto $scheme; } rewrite ^/(v1|v2)/(.*) /api/docker/my_local_repo_key/$1/$2; client_max_body_size 0; chunked_transfer_encoding on; location / { proxy_read_timeout 900; proxy_pass_header Server; proxy_cookie_path ~*^/.* /; proxy_pass http://artifactory_lb; proxy_set_header X-Artifactory-Override-Base-Url $http_x_forwarded_proto://$host; proxy_set_header X-Forwarded-Port $server_port; proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto; proxy_set_header Host $http_host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } } 

当我尝试推入一个泊坞窗图像 – docker push https://myLb.comapny.com/docker/api/image_name我得到以下错误

 v2 ping attempt failed with error: Get https://myLb.company.com/v2/: x509: certificate signed by unknown authority 

注意：我没有问题检查证书和其他存储库中的权限

还在/etc/docker/certs.d和etc / ssl / ca-certificates和usr / local / share / ca-certificates下安装了证书

我错过了什么？

Answer 1

您可能会错过Nginxconfiguration中的证书链。

请参阅： http : //nginx.org/en/docs/http/configuring_https_servers.html#chains

如何获得这个链式证书（中间证书）取决于您的证书颁发机构。 您应该可以通过您的CA指令find它。 例如，对于GoDaddy， 说明指向您可以find中间证书链的存储库： https : //certs.godaddy.com/repository