<html><head>
<meta name="Generator" content="Novell Groupwise Client (Version 14.2.2 Build: 126868)">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head>
<body style="font: 10pt/normal Segoe UI; font-size-adjust: none; font-stretch: normal;"><div class="GroupWiseMessageBody" id="GroupWiseSection_1495171575000_mweiss@suse.com_A842D18121330000A9A50002A5DB3086_"><div>Hi Uli,</div><div><br></div><div>I am not sure if that is the problem and I can not test this at the moment... but depending on how the SSL certificates were created / used on the Registry - you need to export the public key of the CA that signed that certificate and then add this as trusted to the worker nodes. </div><div>(copy to /etc/pki/trust/anchors and then execute /usr/sbin/update-ca-certificates)</div><div><br></div><div>Oh - and when installing Portus it is creating its own certificate with its own CA - not the SLES CA AFAIK...</div><div>So this is my workaround "before" Portus is installed and configured:</div><div>cp -av /etc/ssl/servercerts/servercert.pem /etc/ssl/servercerts/$(hostname -f)-ca.crt<br>cp -av /etc/ssl/servercerts/serverkey.pem /etc/ssl/servercerts/$(hostname -f)-ca.key</div><div>--> to make sure Portus uses the certificate that I already have for the server..</div><div><br></div><div>HTH</div><div>Martin<br></div><div class="GroupWiseMessageBody" id="GroupWiseSection_1495171573000_mweiss@suse.com_A842D18121330000A9A50002A5DB3086_"><span class="GroupwiseReplyHeader"><br><br><span style="display: none;"></span><br></span><div><div>Hi list,</div><div><br></div><div>I want to connect my CaaSP 1.0 beta 3 installation ( adminnode, </div><div>masternode and two worker nodes) with a private docker registry with </div><div>portus in place.</div><div>So far I could set up a private docker registry with portus on a SLE 12 </div><div>SP2 installation using portus and docker-distribution-registry from the </div><div>container module. Now I am struggeling to set up a SSL secured </div><div>connection between the docker on CaaSP and the private registry.</div><div>I tried to copy over certificates from portus to docker on CaaSP but no </div><div>success.</div><div>I then tried to create certificates on the admin node, signed with the </div><div>ca located on the admin node, but this didn't work either, simple tests </div><div>with curl failed, even giving </div><div>--cacert=/etc/pki/trust/anchors/SUSE_CaaSP_CA.crt on cmd-line.</div><div><br></div><div>Any hints how to make this setup working?</div><div><br></div><div>Thank you.</div><div><br></div><div>Kind regards</div><div>Uli</div><div><br></div><div>-- </div><div>Dr. Ulrich Schairer - Technical Architect SAP</div><div>SUSE LINUX GmbH, Maxfeldstrasse 5, 90409 Nürnberg,Germany</div><div>Mobil: +49-173-5876 824</div><div>Email: ulrich.schairer@suse.com</div><div>-----------------------------------------------------------------</div><div>SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard,</div><div>Jennifer Guild, Dilip Upmanyu, Graham Norton, HRB 21284 (AG Nürnberg)</div><div>-----------------------------------------------------------------</div><a href="http://www.suse.com">http://www.suse.com</a><div><br></div><div>_______________________________________________</div><div>caasp-beta mailing list</div><div>caasp-beta@lists.suse.com</div><a href="http://lists.suse.com/mailman/listinfo/caasp-beta">http://lists.suse.com/mailman/listinfo/caasp-beta</a><div><br></div></div></div></div></body></html>