[Bug 1042786] New: Docker can't talk to the API as certificate can't be verfified

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1042786

            Bug ID: 1042786
           Summary: Docker can't talk to the API as certificate can't be
                    verfified
           Product: Fedora
           Version: 19
         Component: docker-io
          Assignee: lsm5(a)redhat.com
          Reporter: peter.meier(a)immerda.ch
        QA Contact: extras-qa(a)fedoraproject.org
                CC: golang(a)lists.fedoraproject.org, lsm5(a)redhat.com,
                    mattdm(a)redhat.com, mgoldman(a)redhat.com,
                    vbatts(a)redhat.com



Description of problem:

I can't use docker, as it can't talk to the API as api.go is not able to
verifiy the certificate of docker's API.

Version-Release number of selected component (if applicable):

# rpm -qi docker-io
Name        : docker-io
Version     : 0.7.0
Release     : 14.fc19
Architecture: x86_64
Install Date: Tue 10 Dec 2013 07:12:16 PM CET
Group       : Unspecified
Size        : 12003115
License     : ASL 2.0
Signature   : RSA/SHA256, Tue 03 Dec 2013 01:17:40 AM CET, Key ID
07477e65fb4b18e6
Source RPM  : docker-io-0.7.0-14.fc19.src.rpm
Build Date  : Mon 02 Dec 2013 05:06:54 PM CET
Build Host  : buildvm-12.phx2.fedoraproject.org


How reproducible:

Install docker-io, try to run a search -> fail


Steps to Reproduce:
1. yum install docker-io
2. systemctl start docker
3. docker search fedora

Actual results:

$ docker search fedora 
2013/12/13 12:41:35 Error: Get https://index.docker.io/v1/search?q=fedora:
x509: certificate signed by unknown authority

/var/log/messages
Dec 13 12:51:10 foo docker[14359]: 2013/12/13 12:51:10 GET
/v1.7/images/search?term=fedora
Dec 13 12:51:10 foo docker[14359]: [error] api.go:1034 Error: Get
https://index.docker.io/v1/search?q=fedora: x509: certificate signed by unknown
authority
Dec 13 12:51:10 foo docker[14359]: [error] api.go:82 HTTP Error: statusCode=500
Get https://index.docker.io/v1/search?q=fedora: x509: certificate signed by
unknown authority


Expected results:

Givme the fedora images


Additional info:

The is no problem to query this URL from curl nor from wget:

# curl https://index.docker.io/v1/search?q=fedora
{"query": "fedora", "num_results": 11, "results":
[{"name": "mattdm/fedora",
"description": "A basic Fedora image corresponding roughly to a minimal
install, minus some things which don't make sense in a container. Use tag `f19`
for Fedora 19."}, {"name": "alexl/fedora-19",
"description": "Minimal base
images based on Fedora 19"}, {"name": "simoncadman/fedora-20",
"description":
"Updated fedora 20, based on goldmann/f20 , includes packages for building
rpms"}, {"name": "mattdm/fedora-small", "description":
"A small Fedora image on
which to build. Contains just enough that you'll be able to run `yum install`
in your dockerfiles to create something useful. Use tag `f19` for Fedora 19."},
{"name": "philips/fedora", "description": ""},
{"name": "kraman/fedora_cfn",
"description": "mattdm/fedora:f19 + cloud-Init\n(SSH key setting has been
disabled)"}, {"name": "dgarcia/fedora18base",
"description": ""}, {"name":
"goldmann/f20", "description": "Fedora 20 repository"},
{"name":
"philips/riak-base", "description": "Base Fedora box with Riak
installed."},
{"name": "jumanjiman/eiffelstudio", "description":
"EiffelStudio IDE in a
Docker container (fedora at the moment)"}, {"name":
"svendowideit/publican",
"description": "Publish DocBook documentation using publican (running in a
fedora container)\n\ndocker run -t -i -v $(pwd):/mnt svendowideit/publican
build"}]}


# wget -O /dev/stdout https://index.docker.io/v1/search?q=fedora
--2013-12-13 12:52:21--  https://index.docker.io/v1/search?q=fedora
Resolving index.docker.io (index.docker.io)... 54.224.119.89, 54.234.135.251
Connecting to index.docker.io (index.docker.io)|54.224.119.89|:443...
connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [application/json]
Saving to: ‘/dev/stdout’

    [<=>                                                                       
                     ] 0           --.-K/s              {"query":
"fedora",
"num_results": 11, "results": [{"name":
"mattdm/fedora", "description": "A
basic Fedora image corresponding roughly to a minimal install, minus some
things which don't make sense in a container. Use tag `f19` for Fedora 19."},
{"name": "alexl/fedora-19", "description": "Minimal
base images based on Fedora
19"}, {"name": "simoncadman/fedora-20", "description":
"Updated fedora 20,
based on goldmann/f20 , includes packages for building rpms"}, {"name":
"mattdm/fedora-small", "description": "A small Fedora image on
which to build.
Contains just enough that you'll be able to run `yum install` in your
dockerfiles to create something useful. Use tag `f19` for Fedora 19."},
{"name": "philips/fedora", "description": ""},
{"name": "kraman/fedora_cfn",
"description": "mattdm/fedora:f19 + cloud-Init\n(SSH key setting has been
disabled)"}, {"name": "dgarcia/fedora18base",
"description": ""}, {"name":
"goldmann/f20", "description": "Fedora 20 repository"},
{"name":
"philips/riak-base", "description": "Base Fedora box with Riak
installed."},
{"name": "jumanjiman/eiffelstudio", "description":
"EiffelStudio IDE in a
Docker container (fedora at the moment)"}, {"name":
"svendowideit/publican",
"description": "Publish DocBook documentation using publican (running in a
fedora container)\n\ndocker run -t -i -v $(pwd):/mnt svendowideit/publican
build"}    [ <=>                                                              

                            ] 1,373       --.-K/s   in 0.001s  

2013-12-13 12:52:21 (1.24 MB/s) - ‘/dev/stdout’ saved [1373]

-- 
You are receiving this mail because:
You are on the CC list for the bug.