Are using self-signed certificates? Does this work with self signed certificates?
Thanks :) On Monday, January 26, 2015 at 10:44:35 AM UTC-8, Markus Koeberl wrote: > > On Monday 26 January 2015 18:50:02 Markus Koeberl wrote: > > Today I updated my Gilab server to the newest Debian omnibus package. > Now I am not able to get the omniouth login working for the ci server. But > the automatic build for previously configured repository is still working. > > > > > > In /var/log/gitlab/gitlab-ci/production.log I see: > > > > Faraday::SSLError (SSL_connect returned=1 errno=0 state=SSLv3 read > server certificate B: certificate verify failed): > > app/controllers/user_sessions_controller.rb:18:in `callback' > > > > > > I do have valid certificates for both servers (google-chrome shows both > in green) at it was working before the update. What may be the problem > here? > > I solved the problem now with saving the full certificate chain of the > root ca into a file and configure the environment varibale SSL_CERT_FILE > for gitlab and gilab-ci in /etc/gitlab/gitlab.rb: > > gitlab_rails['env'] = {"SSL_CERT_FILE" => > "/usr/local/share/ca-certificates/ComodoIntermediateCertificates.crt"} > gitlab_ci['env'] = {"SSL_CERT_FILE" => > "/usr/local/share/ca-certificates/ComodoIntermediateCertificates.crt"} > > und running: > > gitlab-ctl reconfigure > gitlab-ctl restart > > hopefully this info will help others. > > > regards > Markus Köberl > -- > Markus Koeberl > Graz University of Technology > Signal Processing and Speech Communication Laboratory > E-mail: markus....@tugraz.at <javascript:> > -- You received this message because you are subscribed to the Google Groups "GitLab" group. To unsubscribe from this group and stop receiving emails from it, send an email to gitlabhq+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/gitlabhq/ba230792-b296-4225-a5f1-9cb8bfc4c507%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.