bb3e91
% containers-certs.d 5 Directory for storing custom container-registry TLS configurations
bb3e91
bb3e91
# NAME
bb3e91
containers-certs.d - Directory for storing custom container-registry TLS configurations
bb3e91
bb3e91
# DESCRIPTION
bb3e91
A custom TLS configuration for a container registry can be configured by creating a directory under `$HOME/.config/containers/certs.d` or `/etc/containers/certs.d`.
bb3e91
The name of the directory must correspond to the `host:port` of the registry (e.g., `my-registry.com:5000`).
bb3e91
bb3e91
## Directory Structure
bb3e91
A certs directory can contain one or more files with the following extensions:
bb3e91
bb3e91
* `*.crt`  files with this extensions will be interpreted as CA certificates
bb3e91
* `*.cert` files with this extensions will be interpreted as client certificates
bb3e91
* `*.key`  files with this extensions will be interpreted as client keys
bb3e91
bb3e91
Note that the client certificate-key pair will be selected by the file name (e.g., `client.{cert,key}`).
bb3e91
An exemplary setup for a registry running at `my-registry.com:5000` may look as follows:
bb3e91
```
bb3e91
/etc/containers/certs.d/    <- Certificate directory
bb3e91
└── my-registry.com:5000    <- Hostname:port
bb3e91
   ├── client.cert          <- Client certificate
bb3e91
   ├── client.key           <- Client key
bb3e91
   └── ca.crt               <- Certificate authority that signed the registry certificate
bb3e91
```
bb3e91
bb3e91
# HISTORY
bb3e91
Feb 2019, Originally compiled by Valentin Rothberg <rothberg@redhat.com>