I was over-thinking it. All I needed was to use the path to my existing
cert...
gitlab_rails['env'] = {"SSL_CERT_FILE" => "/etc/gitlab/ssl/gitlab.crt"}
gitlab_ci['env'] = {"SSL_CERT_FILE" => "/etc/gitlab/ssl/gitlab.crt"}
It's self signed. But that doesn't matter.
Thanks to you Markus!
-Chris
On Friday, April 24, 2015 at 12:59:40 PM UTC-7, boz jennings wrote:
>
> I'm using gitlab-ce_7.10.0~omnibus.2-1_amd64.deb on Ubuntu on Linode, btw.
>
> On Friday, April 24, 2015 at 12:44:53 PM UTC-7, boz jennings wrote:
>>
>> Are using self-signed certificates?
>>
>> Does this work with self signed certificates?
>>
>> Thanks :)
>>
>> On Monday, January 26, 2015 at 10:44:35 AM UTC-8, Markus Koeberl wrote:
>>>
>>> On Monday 26 January 2015 18:50:02 Markus Koeberl wrote:
>>> > Today I updated my Gilab server to the newest Debian omnibus package.
>>> Now I am not able to get the omniouth login working for the ci server. But
>>> the automatic build for previously configured repository is still working.
>>> >
>>> >
>>> > In /var/log/gitlab/gitlab-ci/production.log I see:
>>> >
>>> > Faraday::SSLError (SSL_connect returned=1 errno=0 state=SSLv3 read
>>> server certificate B: certificate verify failed):
>>> > app/controllers/user_sessions_controller.rb:18:in `callback'
>>> >
>>> >
>>> > I do have valid certificates for both servers (google-chrome shows
>>> both in green) at it was working before the update. What may be the problem
>>> here?
>>>
>>> I solved the problem now with saving the full certificate chain of the
>>> root ca into a file and configure the environment varibale SSL_CERT_FILE
>>> for gitlab and gilab-ci in /etc/gitlab/gitlab.rb:
>>>
>>> gitlab_rails['env'] = {"SSL_CERT_FILE" =>
>>> "/usr/local/share/ca-certificates/ComodoIntermediateCertificates.crt"}
>>> gitlab_ci['env'] = {"SSL_CERT_FILE" =>
>>> "/usr/local/share/ca-certificates/ComodoIntermediateCertificates.crt"}
>>>
>>> und running:
>>>
>>> gitlab-ctl reconfigure
>>> gitlab-ctl restart
>>>
>>> hopefully this info will help others.
>>>
>>>
>>> regards
>>> Markus Köberl
>>> --
>>> Markus Koeberl
>>> Graz University of Technology
>>> Signal Processing and Speech Communication Laboratory
>>> E-mail: [email protected]
>>>
>>
--
You received this message because you are subscribed to the Google Groups
"GitLab" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/gitlabhq/ef13210c-855f-4e94-a125-da108ed64905%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
