ssl-testing-cli.adoc

Testing the SSL/TLS configuration using the CLI

Your SSL/TLS configuration can be tested by using the command-line interface (CLI). Use the following procedure to test your SSL/TLS configuration.

Use the following procedure to test your SSL/TLS configuration using the CLI.

Procedure

1. Enter the following command to attempt to log in to the {productname} registry with SSL/TLS enabled:

   $ sudo podman login quay-server.example.com
   Example output

   Error: error authenticating creds for "quay-server.example.com": error pinging docker registry quay-server.example.com: Get "https://quay-server.example.com/v2/": x509: certificate signed by unknown authority

2. Because Podman does not trust self-signed certificates, you must use the --tls-verify=false option:

   $ sudo podman login --tls-verify=false quay-server.example.com
   Example output

   Login Succeeded!

   In a subsequent section, you will configure Podman to trust the root Certificate Authority.