Resolving DDEV TLS Issues with Colima and Zscaler on macOS
Darren Oh reported that after Cognizant installed Zscaler on his work Mac, DDEV was unable to retrieve images from Docker Hub due to TLS certificate verification issues. Using Colima as his Docker provider, he found that it did not automatically update its root certificate authorities to match the host machine. To resolve this, he exported the Zscaler Root CA certificate from the System keychain in .cer format using Keychain Access, converted it to .crt format with OpenSSL, and placed it in the `.docker/certs.d`
directory in his home directory. After restarting Colima with the Homebrew command `brew services restart colima`
, DDEV was able to retrieve images from Docker Hub successfully.
Source Reference
Date of Publication