Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
containers-certs.d(5)		     storing		   containers-certs.d(5)

NAME
     containers-certs.d  -  Directory  for storing custom container-registry TLS
     configurations

DESCRIPTION
     A custom TLS configuration for a container registry can  be  configured  by
     creating  a  directory  under $HOME/.config/containers/certs.d or /etc/con-
     tainers/certs.d.	The  name  of  the  directory  must  correspond  to  the
     host:port of the registry (e.g., my-registry.com:5000).

Directory Structure
     A	certs  directory can contain one or more files with the following exten-
     sions:

     * *.crt  files with this extensions will be interpreted as CA certificates

     * *.cert files with this extensions will be interpreted as client	certifi-
       cates

     * *.key  files with this extensions will be interpreted as client keys

     Note that the client certificate-key pair will be selected by the file name
     (e.g.,  client.{cert,key}).   An  exemplary setup for a registry running at
     my-registry.com:5000 may look as follows:

     /etc/containers/certs.d/	 <- Certificate directory
     aaa my-registry.com:5000	 <- Hostname:port
	aaa client.cert 	 <- Client certificate
	aaa client.key		 <- Client key
	aaa ca.crt		 <- Certificate authority that signed the registry certificate

HISTORY
     Feb 2019, Originally  compiled  by  Valentin  Rothberg  rothberg@redhat.com
     <mailto:rothberg@redhat.com>

for				    Directory		   containers-certs.d(5)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=containers-certs.d&sektion=5&manpath=FreeBSD+Ports+15.1.quarterly>

home | help