OpenSSL::OpenSSLError

use rpm to install gitlab-ce-10.4.0-ce.0.el7.x86_64.rpm to a isolated 7.4 Centos laptop.
Isolated = without connection to internet.

Installation was done without error.

Made change on /etc/gitlab/gitlab.rb
external_url 'http://testing"

Run reconfigure command
/opt/gitlab/bin/gitlab-ctl reconfigure

Error message below:
/opt/gitlab/embedded/lib/ruby/gems/2.3.0/gems/chef-config-12.12.15/lib/chef-config/config.rb:1012:in `fips_mode=’: This version of OpenSSL does not support FIPS mode (OpenSSL::OpenSSLError)

I know this is over a year ago, but I wanted to know if you have fips=1 in your boot parameters. I know at least Ruby has issues with that flag being on. (It might just be the OpenSSL gem). There appears to be an issue that’s been around over a year, where it was stated that GitLab does not work with systems using FIPS for hardening.

Last time I try to post. Any ideas what this is? It’s centos latest everything. Completely fresh. I suspect the issue is major because after installation you also can’t reach the program even know the firewall and system is live. I am unsure of how to proceed.

On another side note gitlab-ctl status returns nothing. In fact despite the program being installed I can’t find any signs it’s actually running.

GOOD NEWS TO THE POSSIBLY THOUSANDS OF PEOPLE WHO HAVE WASTED TONS OF TIME!

use vi or vim

vi /opt/gitlab/embedded/lib/ruby/gems/2.6.0/gems/chef-config-13.6.4/lib/chef-config/config.rb

Search in your editor

/fips

Look for this
#Initialize openssl
def self.init_openssl
if fips
enable_fips_mode <Comment THIS line out. #enable_fips_mode
end
end

comment out said line

run your reconfigure command. gitlab-cmd reconfigure

wait.
reboot.
live.
done.

I am not suggesting this is the correct way but I am at the landing page and all sevices are now live. I suspect every single person using centos has this issue so hopefully this solves your pain and frustration. If anyone can figure out an openssl solution with fips I am all ears.