From 0cfafb0e0f36484d0ce9ac9a595f64c23d846edc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=B3=BB=E7=B5=B1=E7=AE=A1=E7=90=86=E5=93=A1?=
 <admin@noreply.localhost>
Date: Fri, 6 Mar 2026 06:13:14 +0000
Subject: [PATCH] =?UTF-8?q?=E6=96=B0=E5=A2=9E=20=E6=86=91=E8=AD=89=20x509?=
 =?UTF-8?q?=20=E5=95=8F=E9=A1=8C?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 %E6%86%91%E8%AD%89-x509-%E5%95%8F%E9%A1%8C.md | 49 +++++++++++++++++++
 1 file changed, 49 insertions(+)
 create mode 100644 %E6%86%91%E8%AD%89-x509-%E5%95%8F%E9%A1%8C.md

diff --git a/%E6%86%91%E8%AD%89-x509-%E5%95%8F%E9%A1%8C.md b/%E6%86%91%E8%AD%89-x509-%E5%95%8F%E9%A1%8C.md
new file mode 100644
index 0000000..38d20ea
--- /dev/null
+++ b/%E6%86%91%E8%AD%89-x509-%E5%95%8F%E9%A1%8C.md
@@ -0,0 +1,49 @@
+這個問題是因為Ubuntu缺少所需的憑證，透過以下步驟可以解決這個問題。
+
+# 1. 查詢缺少的憑證
+
+```bash
+openssl s_client -connect registry-1.docker.io:443 -showcerts
+```
+
+複製憑證鏈中，最後的憑證金鑰，內容如下(請自己執行，因為憑證可能更新，以下金鑰複製於2025/03/24)：
+
+```bash
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+```
+
+# 2. 查詢憑證存放的位置
+
+```bash
+curl -k -v https://registry-1.docker.io/v2/
+```
+
+Ubuntu 24.04 存放於以下位置
+
+```bash
+/etc/ssl/certs/ca-certificates.crt
+```
+
+將剛剛查詢的憑證金鑰加入到 ca-certificates.crt 檔案中的最後。
\ No newline at end of file