diff --git a/src/moby/trust.go b/src/moby/trust.go index 57ad3331f..a1fa726f2 100644 --- a/src/moby/trust.go +++ b/src/moby/trust.go @@ -194,13 +194,7 @@ func httpsTransport(caFile string) (*http.Transport, error) { TLSClientConfig: tlsConfig, } // Override with the system cert pool if the caFile was empty - if caFile == "" { - systemCertPool, err := x509.SystemCertPool() - if err != nil { - return nil, err - } - transport.TLSClientConfig.RootCAs = systemCertPool - } else { + if caFile != "" { certPool := x509.NewCertPool() pems, err := ioutil.ReadFile(caFile) if err != nil {