Direct transfer: Unable to connect to server: SSL_connect returned=1 errno=0 peeraddr=10.200.10.59:443 state=error: certificate verify failed (unable to get local issuer certificate)

Problem to solve

After installing a new Gitlab using helm chart ( latest 7.10.1 ), I want to migrate my current instance which is local instance with self-sign certificate.

Using Import group-> Import groups by direct transfer
I’m providing URL to my current instance, and inside the values, I’m providing the crt in this way:

  global:
    hosts:
      domain: domain.local
    ingress:
      class: nginx
    certificates:
      customCAs:
       - secret: gitlab-mycompany
         keys:
           - gitlab.domain.local.crt

which is included in my cluster.

Then try to click “connect instance” and getting:

Unable to connect to server: SSL_connect returned=1 errno=0 peeraddr=10.200.10.59:443 state=error: certificate verify failed (unable to get local issuer certificate)

Not sure what else need to be provided, for a small test I’ve connected to a pod and used curl with https and seem to work.

Steps to reproduce

Install gitlab helm chart, using this values:

  global:
    hosts:
      domain: domain.local
    ingress:
      class: nginx
    certificates:
      customCAs:
       - secret: gitlab-mycompany
         keys:
           - gitlab.domain.local.crt
  nginx-ingress:
    enabled: false
  nginx-ingress-geo:
    enabled: false
  prometheus:
    install: false
  gitlab-runner:
    install: false
  certmanager-issuer:
    email: email@gmail.com

Configuration


Versions

Please select whether options apply, and add the version information.

  • Self-managed

Versions