Brian Norman bnorm

## 1-Enable Docker Remote API with TLS client verification.md

      
              2 files
            
          
              35 forks
            
          
              8 comments
            
          
              123 stars
            
          
                kekru
                / 1-Enable Docker Remote API with TLS client verification.md
            
            
              Last active
              January 11, 2024 18:21
            
              
                Docker Remote API with client verification via daemon.json
              
          
    Enable Docker Remote API with TLS client verification

Docker's Remote API can be secured via TLS and client certificate verification.

First of all you need a few certificates and keys:

CA certificate
Server certificate
Server key
Client certificate
Client key

Create certificate files


## avd_bundle.xml
<?xml version="1.0" encoding="utf-8"?>
<!--
  Copyright 2016 Google Inc.

  Licensed under the Apache License, Version 2.0 (the "License");
  you may not use this file except in compliance with the License.
  You may obtain a copy of the License at

       http://www.apache.org/licenses/LICENSE-2.0

## Using certs script to secure Docker daemon.md

      
              1 file
            
          
              1 fork
            
          
              0 comments
            
          
              2 stars
            
          
                itzg
                / Using certs script to secure Docker daemon.md
            
            
              Last active
              February 15, 2022 21:00
            
          
    Setup

This procedure uses the certs.sh located over at my other gist.
Get that script directly or git clone the gist.
Create certs

Init

./certs.sh init
	<?xml version="1.0" encoding="utf-8"?>
	<!--
	Copyright 2016 Google Inc.

	Licensed under the Apache License, Version 2.0 (the "License");
	you may not use this file except in compliance with the License.
	You may obtain a copy of the License at

	http://www.apache.org/licenses/LICENSE-2.0