Skip to content

Custom CA store #2118

Description

@polyfloyd

What is the version of your ORAS CLI

1.3.0

What would you like to be added?

A way to store custom certificate authorities or certificates for added registries. Currently, when a registry has a certificate not trusted by the system store it has to be specified with --ca-file. This becomes cumbersome really quickly.

Docker supports a convention of reading ca.crt and cert.crt from ~/.config/docker/certs.d/HOST/. As Oras also already reads ~/.docker/config.json, it would make sense to also support this same convention.

Why is this needed for ORAS?

Quality of life

Are you willing to submit PRs to contribute to this feature?

  • Yes, I am willing to implement it.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions