From 26187bd851141236a909c0bada5a2743fc237e0e Mon Sep 17 00:00:00 2001 From: Lorenz Leutgeb Date: Mon, 5 Jan 2015 01:24:33 +0100 Subject: [PATCH] doc: Fix curl invocation Using --insecure is (you guessed it) *insecure* as the server side certificate is not being validated. To offer the same degree of security as invocations of the docker client in "Secure by default" with cURL, the trusted CA certificate must be supplied. Signed-off-by: Lorenz Leutgeb --- docs/sources/articles/https.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/docs/sources/articles/https.md b/docs/sources/articles/https.md index 925ba8f8f2..cf1ccaef6e 100644 --- a/docs/sources/articles/https.md +++ b/docs/sources/articles/https.md @@ -167,4 +167,7 @@ location using the environment variable `DOCKER_CERT_PATH`. To use `curl` to make test API requests, you need to use three extra command line flags: - $ curl --insecure --cert ~/.docker/cert.pem --key ~/.docker/key.pem https://boot2docker:2376/images/json` + $ curl https://boot2docker:2376/images/json \ + --cert ~/.docker/cert.pem \ + --key ~/.docker/key.pem \ + --cacert ~/.docker/ca.pem