portainer: http error: certificate signed by unknown authority (code=500)

Description

When I click the App Templates link its throws an error. Checking the logs it says

2018/04/24 06:24:49 Starting Portainer 1.16.5 on :9000,
2018/04/24 07:13:16 http error: User not found (code=404),
2018/04/24 07:14:23 http error: Get https://raw.githubusercontent.com/portainer/templates/master/templates.json: x509: certificate signed by unknown authority (code=500),
2018/04/24 07:14:35 http error: Get https://raw.githubusercontent.com/portainer/templates/master/templates.json: x509: certificate signed by unknown authority (code=500),
2018/04/24 07:14:51 http error: Get https://raw.githubusercontent.com/portainer/templates/master/templates.json: x509: certificate signed by unknown authority (code=500),
2018/04/24 07:15:54 http error: Get https://raw.githubusercontent.com/portainer/templates/master/templates.json: x509: certificate signed by unknown authority (code=500),
2018/04/24 07:24:17 http error: Get https://raw.githubusercontent.com/portainer/templates/master/templates.json: x509: certificate signed by unknown authority (code=500),

Steps to reproduce the issue:

  1. Deploy Portainer
  2. Click on the App Templates link
  3. Check container logs

Technical details:

  • Portainer version: 1.16.5
  • Target Docker version (the host/cluster you manage): 17.12.1-ce
  • Platform (windows/linux): Alpine Linux 3.7.0
  • Command used to start Portainer:
docker service create \
--name portainer \
--publish 9000:9000 \
--replicas=1 \
--constraint 'node.role == manager' \
--mount type=bind,src=//var/run/docker.sock,dst=/var/run/docker.sock \
--mount type=bind,src=//opt/portainer,dst=/data \
portainer/portainer \
-H unix:///var/run/docker.sock
  • Target Swarm version (if applicable): N/A
  • Browser: Google Chrome Version 65.0.3325

About this issue

  • Original URL
  • State: closed
  • Created 6 years ago
  • Comments: 15 (2 by maintainers)

Commits related to this issue

Most upvoted comments

I worked around the issue with this Dockerfile. It will show a warning about “only one certificate” but you can ignore it. I’m not sure if this works with the normal “portainer/agent” image. That one seems tightly protected. The alpine one was easier to modify.

FROM portainer/agent:linux-amd64-1.6.0-alpine

RUN apk update && apk add ca-certificates && rm -rf /var/cache/apk/*

COPY ./my-cert-auth.crt /usr/local/share/ca-certificates/

RUN update-ca-certificates