Skip to content

Add support for sha512-based x509 certs in docker registry #5173

@jcrobak

Description

@jcrobak

One of the certs in our certificate chain uses Signature Algorithm: sha384WithRSAEncryption. When trying to push or pull from that repo, we get an error message:

[debug] registry.go:144 Registry https://redacted:443/v1/ does not work (Get https://redacted:443/v1/_ping: x509: certificate signed by unknown authority (possibly because of "x509: cannot verify signature: algorithm unimplemented" while trying to verify candidate authority certificate "redacted")), falling back to http

I've been able to repro this error in a simple go 1.2 program and resolve it with the fix mentioned in: https://code.google.com/p/go/issues/detail?id=5058 Namely, import _ "crypto/sha512"

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions