Why Does My Docker Go Image Fail `go get` Due to an Unknown Authority Signature?

Docker Go Image Unable to go get Due to Unknown Authority Signature

An issue is encountered when attempting to install packages using go install within a Docker Go image. The error reported is:

google.golang.org/protobuf/cmd/[email protected]: invalid version: Get "https://proxy.golang.org/google.golang.org/protobuf/cmd/protoc-gen-go/@v/1.27.0.info": x509: certificate signed by unknown authority

Despite efforts to install CA certificates, the problem persists.

Root Cause and Solution

As discovered by the user, the issue stems from a security client, Cisco AnyConnect "Umbrella." This client acts as a man-in-the-middle, re-signing requests with its own certificate. To resolve this, the Cisco Umbrella Root CA certificate must be added to the Docker image:

1. Download the Cisco Umbrella root certificate from the Cisco website.
2. Convert the certificate from .cer to .crt using openssl.
3. Copy the converted certificate to the certificate folder in the Docker image.
4. Update the certificates using update-ca-certificates.

By adding the necessary certificate authority, the Docker Go image can now successfully retrieve packages using go get.

The above is the detailed content of Why Does My Docker Go Image Fail `go get` Due to an Unknown Authority Signature?. For more information, please follow other related articles on the PHP Chinese website!