registry, with --tls-verify=false removed, system now has x509 errors

[mriensch]

we will need to add generated CA to the system trust, so we can login to the registry