docker tls syslog：远程错误：tls：错误的证书

Question

我有带TLS的远程syslog服务器。 openssl没有连接问题。

# openssl s_client -connect syslog.local:5514 -cert syslog.crt -key syslog.key -CAfile syslog.ca.crt
CONNECTED(00000003)

但是docker有问题：

docker run \
--rm \
--log-driver syslog \
--log-opt syslog-tls-cert=/etc/ca-certificates/syslog.crt \
--log-opt syslog-tls-key=/etc/ca-certificates/syslog.key \
--log-opt syslog-tls-ca-cert=/etc/ca-certificates/syslog.ca.crt \
--log-opt syslog-address=tcp+tls://syslog.local:5514 \
alpine echo hello world

docker: Error response from daemon: failed to initialize logging driver: remote error: tls: bad certificate.

该如何解决？