@@ -24,6 +24,10 @@ func (c *Config) NewClient() (*dc.Client, error) {
 			return nil, fmt.Errorf("ca_material, cert_material, and key_material must be specified")
 		}
 
+		if c.CertPath != "" {
+			return nil, fmt.Errorf("cert_path must not be specified")
+		}
+
 		return dc.NewTLSClientFromBytes(c.Host, []byte(c.Cert), []byte(c.Key), []byte(c.Ca))
 	}
 
 
@@ -18,25 +18,22 @@ func Provider() terraform.ResourceProvider {
 			},
 
 			"ca_material": &schema.Schema{
-				Type:          schema.TypeString,
-				Optional:      true,
-				DefaultFunc:   schema.EnvDefaultFunc("DOCKER_CA_MATERIAL", ""),
-				ConflictsWith: []string{"cert_path"},
-				Description:   "PEM-encoded content of Docker host CA certificate",
+				Type:        schema.TypeString,
+				Optional:    true,
+				DefaultFunc: schema.EnvDefaultFunc("DOCKER_CA_MATERIAL", ""),
+				Description: "PEM-encoded content of Docker host CA certificate",
 			},
 			"cert_material": &schema.Schema{
-				Type:          schema.TypeString,
-				Optional:      true,
-				DefaultFunc:   schema.EnvDefaultFunc("DOCKER_CERT_MATERIAL", ""),
-				ConflictsWith: []string{"cert_path"},
-				Description:   "PEM-encoded content of Docker client certificate",
+				Type:        schema.TypeString,
+				Optional:    true,
+				DefaultFunc: schema.EnvDefaultFunc("DOCKER_CERT_MATERIAL", ""),
+				Description: "PEM-encoded content of Docker client certificate",
 			},
 			"key_material": &schema.Schema{
-				Type:          schema.TypeString,
-				Optional:      true,
-				DefaultFunc:   schema.EnvDefaultFunc("DOCKER_KEY_MATERIAL", ""),
-				ConflictsWith: []string{"cert_path"},
-				Description:   "PEM-encoded content of Docker client private key",
+				Type:        schema.TypeString,
+				Optional:    true,
+				DefaultFunc: schema.EnvDefaultFunc("DOCKER_KEY_MATERIAL", ""),
+				Description: "PEM-encoded content of Docker client private key",
 			},
 
 			"cert_path": &schema.Schema{
Original file line number	Diff line number	Diff line change
`@@ -24,6 +24,10 @@ func (c Config) NewClient() (dc.Client, error) {`
`24`	`24`	`return nil, fmt.Errorf("ca_material, cert_material, and key_material must be specified")`
`25`	`25`	`}`
`26`	`26`
	`27`	`+ if c.CertPath != "" {`
	`28`	`+ return nil, fmt.Errorf("cert_path must not be specified")`
	`29`	`+ }`
	`30`	`+`
`27`	`31`	`return dc.NewTLSClientFromBytes(c.Host, []byte(c.Cert), []byte(c.Key), []byte(c.Ca))`
`28`	`32`	`}`
`29`	`33`