On Monday 26 January 2015 18:50:02 Markus Koeberl wrote: > Today I updated my Gilab server to the newest Debian omnibus package. Now I > am not able to get the omniouth login working for the ci server. But the > automatic build for previously configured repository is still working. > > > In /var/log/gitlab/gitlab-ci/production.log I see: > > Faraday::SSLError (SSL_connect returned=1 errno=0 state=SSLv3 read server > certificate B: certificate verify failed): > app/controllers/user_sessions_controller.rb:18:in `callback' > > > I do have valid certificates for both servers (google-chrome shows both in > green) at it was working before the update. What may be the problem here?
I solved the problem now with saving the full certificate chain of the root ca into a file and configure the environment varibale SSL_CERT_FILE for gitlab and gilab-ci in /etc/gitlab/gitlab.rb: gitlab_rails['env'] = {"SSL_CERT_FILE" => "/usr/local/share/ca-certificates/ComodoIntermediateCertificates.crt"} gitlab_ci['env'] = {"SSL_CERT_FILE" => "/usr/local/share/ca-certificates/ComodoIntermediateCertificates.crt"} und running: gitlab-ctl reconfigure gitlab-ctl restart hopefully this info will help others. regards Markus Köberl -- Markus Koeberl Graz University of Technology Signal Processing and Speech Communication Laboratory E-mail: markus.koeb...@tugraz.at