Ubuntu gitlab-ee-omnibus ssl ldap certificate verify failed

How to Use GitLab Self-managed
3

Ok I resolv it. Need copy certificates in /etc/gitlab/trusted-certs

Other Certificate Authorities

Omnibus GitLab supports connections to external services with self-signed certificates.
Compatibility Note Custom certificates were introduced in GitLab 8.9.
Further Reading For installations that use self-signed certificates, Omnibus-GitLab provides a way to manage these certificates. For more technical details how this works, see the details at the bottom of this page.

Install Custom Public Certificates

Note: A perl interpreter is required for c_rehash dependency to properly symlink the certificates. Perl is currently not bundled in Omnibus GitLab.

  1. Generate the PEM or DER encoded public certificate from your private key certificate.
  2. Copy the public certificate file only into the /etc/gitlab/trusted-certs directory.
  3. Run gitlab-ctl reconfigure .

But I still don’t understand why Gitlab ignores OS local CA store. :frowning: