Gitlab : Peer's certificate issuer has been marked as not trusted by the user

Question

我有一个本地 gitlab，我试图在其中运行一些构建/管道，但出现以下错误 -

fatal: unable to access 'https://gitlab-ci-token:[MASKED]@gitlab.systems/testing/test-project-poc.git/': Peer's certificate issuer has been marked as not trusted by the user.

我已经研究过这个 - Gitlab:Peer's Certificate issuer is not recognized 并遵循通过合并 .pem 、 server certificate 和 intermediate certificate 来获取 root certificate 文件的步骤，但我仍然遇到以下错误并且真的很难找到根本原因。 /etc/gitlab/gitlab.rb config

##! enable/disable 2-way SSL client authentication
#nginx['ssl_verify_client'] = "off"

##! if ssl_verify_client on, verification depth in the client certificates chain
#nginx['ssl_verify_depth'] = "1"

nginx['ssl_certificate'] = "/etc/gitlab/ssl/gitlab.systems.pem"
nginx['ssl_certificate_key'] = "/etc/gitlab/ssl/gitlab.systems.key"

是否还有其他配置需要更新/修改？任何指导都非常感谢。

Answer 1

我猜您正在使用自签名证书。如果是这种情况，您有两种选择来纠正此问题:

推荐选项:这里再次假设您已经解决了gitlab-runner和gitlab itseld之间的问题，因此您成功注册了runner。所以你已经在/etc/gitlab-runner/certs.conf 文件中了证书文件。因此，在托管 gitlab-runner 的服务器上，运行以下命令:

git config --system http.sslCAInfo /etc/gitlab-runner/certs/CERITIFICATE_NAME.crt

这是不安全的:这里您只需禁用 git https 证书验证:

git config --system http.sslverify false