Are using self-signed certificates?

Does this work with self signed certificates?

Thanks :)

On Monday, January 26, 2015 at 10:44:35 AM UTC-8, Markus Koeberl wrote:
>
> On Monday 26 January 2015 18:50:02 Markus Koeberl wrote: 
> > Today I updated my Gilab server to the newest Debian omnibus package. 
> Now I am not able to get the omniouth login working for the ci server. But 
> the automatic build for previously configured repository is still working. 
> > 
> > 
> > In /var/log/gitlab/gitlab-ci/production.log I see: 
> > 
> > Faraday::SSLError (SSL_connect returned=1 errno=0 state=SSLv3 read 
> server certificate B: certificate verify failed): 
> >   app/controllers/user_sessions_controller.rb:18:in `callback' 
> > 
> > 
> > I do have valid certificates for both servers (google-chrome shows both 
> in green) at it was working before the update. What may be the problem 
> here? 
>
> I solved the problem now with saving the full certificate chain of the 
> root ca into a file and configure the environment varibale SSL_CERT_FILE 
> for gitlab and gilab-ci in /etc/gitlab/gitlab.rb: 
>
> gitlab_rails['env'] = {"SSL_CERT_FILE" => 
> "/usr/local/share/ca-certificates/ComodoIntermediateCertificates.crt"} 
> gitlab_ci['env'] = {"SSL_CERT_FILE" => 
> "/usr/local/share/ca-certificates/ComodoIntermediateCertificates.crt"} 
>
> und running: 
>
> gitlab-ctl reconfigure 
> gitlab-ctl restart 
>
> hopefully this info will help others. 
>
>
> regards 
> Markus Köberl 
> -- 
> Markus Koeberl 
> Graz University of Technology 
> Signal Processing and Speech Communication Laboratory 
> E-mail: markus....@tugraz.at <javascript:> 
>

-- 
You received this message because you are subscribed to the Google Groups 
"GitLab" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to gitlabhq+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/gitlabhq/ba230792-b296-4225-a5f1-9cb8bfc4c507%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to