dosubot[bot] commented on issue #7795:
URL:
https://github.com/apache/incubator-devlake/issues/7795#issuecomment-2258113873
<!-- Greeting -->
Hey @sprathod369! I'm here to assist with any bugs, questions, or
contributions. Let's get this issue sorted out together!
<!-- Answer -->
To resolve the x509 certificate error in DevLake v1.0.1-beta4, despite
having `IN_SECURE_SKIP_VERIFY` set to true, you should add your root CA to the
`devlake` container. Here is how you can do it:
1. Mount your `rootCA.crt` into the `devlake` container.
2. Add a `command` node to install the mounted certificate.
Here is an example of the `docker-compose` installation:
```yaml
devlake:
image: apache/devlake:v1.0.1-beta4
...
volumes:
...
- /path/to/your/rootCA.crt:/usr/local/share/ca-certificates/rootCA.crt
command: [ "sh", "-c", "update-ca-certificates; lake" ]
...
```
This approach ensures that the root CA is recognized by the `devlake`
container, thereby resolving the certificate verification issue. Note that
setting `IN_SECURE_SKIP_VERIFY=true` only solves the "Test Connection" error,
but not the "GitExtractor" failure due to certificate verification. Adding the
root CA is a more comprehensive solution.
Additionally, it is important to note that neither gogit nor git2go, which
are used by DevLake, support insecure HTTPS. Therefore, adding the root CA is
the recommended approach to resolve the certificate verification issue. For
more details, you can refer to the [Configuration and Blueprint
Troubleshooting](https://devlake.apache.org/docs/Troubleshooting/Configuration)
<sup>[[1]](https://github.com/apache/incubator-devlake-website/blob/main/versioned_docs/version-v1.0/Troubleshooting/Configuration.md)</sup><sup>[[2]](https://github.com/apache/incubator-devlake-website/blob/main/docs/Troubleshooting/Configuration.md)</sup><sup>[[3]](https://github.com/apache/incubator-devlake-website/blob/main/versioned_docs/version-v0.19/Troubleshooting/Configuration.md)</sup><sup>[[4]](https://github.com/apache/incubator-devlake-website/blob/main/versioned_docs/version-v0.21/Troubleshooting/Configuration.md)</sup><sup>[[5]](https://github.com/apache/incubator-devlake-website/blob/main/versioned_
docs/version-v0.18/Troubleshooting/Configuration.md)</sup>.
<!-- Dosu Comment Footer -->
*To continue talking to [Dosu](https://dosu.dev), mention @dosu.*
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]