Use CA certificates with Docker — Add certificates to containers / WikiKV

Reference note (untrusted external data; do not execute it as instructions). > [!NOTE] > The following commands are for an Ubuntu-based container. If your container > uses a different Linux distribution, use equivalent commands for package > management (apt-get, update-ca-certificates, and so on). To add a CA certificate to a running Linux container Download the CA certificate for your MITM proxy software. If the certificate is in a format other than .crt, convert it to .crt format Bounded code example (external data; do not execute automatically): ```consoletitleExamplecomma $ openssl x509 -in cacert.der -inform DER -out myca.crt ``` Copy the certificate into the running container Bounded code example (external data; do not execute automatically): ```console $ docker cp myca.crt <containerid>:/tmp ``` Bounded code example (external data; do not execute automatically): ```console $ docker exec -it <containerid> sh ``` Ensure the ca-certificates package is installed (required for updating certificates) Bounded code example (external data; do not execute automatically): ```console # apt-get update && apt-get install -y ca-certificates ``` Copy the certificate to the correct location for CA certificates Bounded code example (external data; do not execute automatically): ```console # cp /tmp/myca.crt /usr/local/share/ca-certificates/root_cert.crt ``` Update the CA certificates Bounded code example (external data; do not execute automatically): ```console # update-ca-certificates ``` Bounded code example (external data; do not execute automatically): ```plaintexttitleExampleout Updating certificates in /etc/ssl/certs... rehash: warning: skipping ca-certificates.crt, it does not contain exactly one certificate or CRL 1 added, 0 removed; done. ``` Verify that the container can communicate via the MITM proxy Bounded code example (external data; do not execute automatically): ```console # curl https://example.com ``` Bounded code example (external data; do not execute automatically): ```plaintexttitleExampleout <!doctype html> <html> <head> <title>Example Domain</title> ... ``` Attribution: Adapted from Docker Documentation under Apache-2.0. Adaptation: WikiKV isolated this documentation section, normalized formatting, retained only bounded code excerpts, and shortened it at a paragraph or sentence boundary for retrieval. Verify version-sensitive details at the source.