vbatts/registry
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity
registry/docs
History
Felix Bünemann 4ecb17cc4c registry: support whitelisting letsencrypt hosts 
This adds a configuration setting `HTTP.TLS.LetsEncrypt.Hosts` which can
be set to a list of hosts that the registry will whitelist for retrieving
certificates from Let's Encrypt. HTTPS connections with SNI hostnames
that are not whitelisted will be closed with an "unknown host" error.
It is required to avoid lots of unsuccessful registrations attempts that
are triggered by malicious clients connecting with bogus SNI hostnames.

NOTE: Due to a bug in the deprecated vendored rsc.io/letsencrypt library
clearing the host list requires deleting or editing of the cachefile to
reset the hosts list to null.

Signed-off-by: Felix Buenemann <felix.buenemann@gmail.com>
2018-02-01 21:16:58 +01:00
..
spec Fix keyword format for downstream docs 2017-10-24 15:26:28 -07:00
architecture.md Put architecture.md back into distribution repo 2017-05-23 11:24:11 -07:00
configuration.md registry: support whitelisting letsencrypt hosts 2018-02-01 21:16:58 +01:00
README.md Add back configuration.md and add clarification to README.md 2016-10-13 11:49:49 -07:00

README.md

The docs have been moved!

The documentation for Registry has been merged into the general documentation repo. Commit history has been preserved.

The docs for Registry are now here: https://github.com/docker/docker.github.io/tree/master/registry

Note: The definitive ./spec directory directory and configuration.md file will be maintained in this repository and be refreshed periodically in the general documentation repo.

As always, the docs in the general repo remain open-source and we appreciate your feedback and pull requests!