On Monday 26 January 2015 18:50:02 Markus Koeberl wrote:
> Today I updated my Gilab server to the newest Debian omnibus package. Now I
> am not able to get the omniouth login working for the ci server. But the
> automatic build for previously configured repository is still working.
>
>
> In /var/log/gitlab/gitlab-ci/production.log I see:
>
> Faraday::SSLError (SSL_connect returned=1 errno=0 state=SSLv3 read server
> certificate B: certificate verify failed):
> app/controllers/user_sessions_controller.rb:18:in `callback'
>
>
> I do have valid certificates for both servers (google-chrome shows both in
> green) at it was working before the update. What may be the problem here?
I solved the problem now with saving the full certificate chain of the root ca
into a file and configure the environment varibale SSL_CERT_FILE for gitlab and
gilab-ci in /etc/gitlab/gitlab.rb:
gitlab_rails['env'] = {"SSL_CERT_FILE" =>
"/usr/local/share/ca-certificates/ComodoIntermediateCertificates.crt"}
gitlab_ci['env'] = {"SSL_CERT_FILE" =>
"/usr/local/share/ca-certificates/ComodoIntermediateCertificates.crt"}
und running:
gitlab-ctl reconfigure
gitlab-ctl restart
hopefully this info will help others.
regards
Markus Köberl
--
Markus Koeberl
Graz University of Technology
Signal Processing and Speech Communication Laboratory
E-mail: [email protected]
