ninehills / blog

https://ninehills.tech
747 stars 65 forks source link

Docker Desktop for macOS 增加自定义 Registry 证书 #91

Closed ninehills closed 1 year ago

ninehills commented 1 year ago

首先使用 openssl 拿到 Registry 的自签名 CA 证书:

openssl s_client -showcerts -connect 10.124.142.91:443 < /dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ca.crt

然后增加证书:

# Add the cert for all users (系统级别)
sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ca.crt

# Add the cert for yourself (或用户级别)
security add-trusted-cert -d -r trustRoot -k ~/Library/Keychains/login.keychain ca.crt

最后重启 Docker Desktop。