Bug: x509 certificate error when pulling images (Cloudflare R2 backend)

[xscriptor]

Hi. I'm experiencing a TLS certificate error when trying to pull official images (like mysql:8.0 or nginx:alpine) using docker-compose up. The issue seems related to the Cloudflare R2 storage backend certificates.

Error message:
tls: failed to verify certificate: x509: certificate is not valid for any names, but wanted to match docker-images-prod.[...].r2.cloudflarestorage.com

Workaround:
The only way I could fix it and pull the images was by adding "registry-mirrors": ["https://mirror.gcr.io"] to my /etc/docker/daemon.json.

Environment:

OS: Arch X Linux - Ubuntu WSL
Tool: Docker / Docker Compose

[github-actions]

Thank you for your feedback 👍.

Our team will review your issue shortly.
In the meantime, feel free to provide as many details as possible, as this will speed up the resolution.

If you need assistance rather than providing feedback, please contact the Docker support team via https://hub.docker.com/support/contact for a prompt response, and close this issue.

[jcarter3]

Are you using any sort of proxy? The Cloudflare R2 certs are valid.

[xscriptor]

Are you using any sort of proxy? The Cloudflare R2 certs are valid.

No, but also I fixed this using https://mirror.gcr.io in the docker engine. But now I think maybe was an Issue of the ISP because today this is working again, I'll close the issue...

[javmarina]

@xscriptor very likely Spanish football games were being played. Happening to me right now: https://hayahora.futbol/