tree 0134e4448089743b83c7fdfd06a3d1470969c992
parent 2629fe93266e82751af4f1c7568e21060f065b73
author Sebastiaan van Stijn <github@gone.nl> 1534853166 +0200
committer Sebastiaan van Stijn <github@gone.nl> 1534881804 +0200
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQIcBAABAgAGBQJbfHAOAAoJEHZpjznVJ86MXbsP/RL/Nr58cG5dvtKKvf25dHli
 FQeesEga0qJskxb6XHeIX/uQxUkyT/0k/+0znOu8zuGe1jRNYFEzKaAPhYOfBfuB
 vtCkdSC1gWKTfo5tMjW2UMComtJWWlRCgJTd/5s9UqGksoWGgyYtdUDEc6E0HyDl
 k1GrC5vuuj7tFSzkUJugIGU31zunLf+R8z7v8v72p1/fJ4tFYOucS1G07nmuFaB8
 xrO+SwRcn8NC1pOpfN07YK9nPfr4qtZhCxPFmaEQMN74tCfl5mnoLqqzkG4zsNPN
 /O+8cGll50oF+WpV3remDrZjL50a03/6x/RsFEC//SFm9lcZdGbgp78rYLQYOHpv
 +c8kL1VXXTWH7l0bKSGHW+9ji0KEA0DSH3dBTanlTfeP7TB89tDdjlsBlTOPhlxd
 yBjDC9DBeEoy813hQb/ZHuFqZJch+6CMPMX8T4O+m94ObMeujLVLvBK+24RnpQcE
 v2MPUqRrzQewsSP0/SFe2vMFffbFw0kaqLC32SNTI6DHB022h+mlV8Eh4I45tgCG
 dmZPyvFjT1IpL4rVTfkiK+8Gl5HbKnU4/6mg76db62N4vsdh/Fy/ojwoKQw812+v
 72WP/1JCua9TA8nYiUceY/HQdF0ToxdqLzUOL3VEBpkkrhF9xly5PlZoDqPFw2q3
 aLO3JTMs7gqfiCeplMjY
 =DO3+
 -----END PGP SIGNATURE-----

Add warning if REST API is accessible through an insecure connection

The remote API allows full privilege escalation and is equivalent to
having root access on the host. Because of this, the API should never
be accessible through an insecure connection (TCP without TLS, or TCP
without TLS  verification).

Although a warning is already logged on startup if the daemon uses an
insecure configuration, this warning is not very visible (unless someone
decides to read the logs).

This patch attempts to make insecure configuration more visible by sending
back warnings through the API (which will be printed when using `docker info`).

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>