Using tls client cert with gitlab-runner --tls-cert-file --tls-key-file

Hi !

I’m trying to use gitlab-runner with TLS client authentication using –tls-cert-file and –tls-key-file options:

gitlab-runner --debug register --tls-cert-file mycert.pem --tls-key-file mykey.key -r rxxxxtokenxxx -u --name sorin-macos-test --tag-list some-tag --executor shell

but on the Apache reverse proxy doing the certificate authentication I’m getting errors like:

AH02261: Re-negotiation handshake failed
SSL Library Error: error:140890C7:SSL routines:ssl3_get_client_certificate:peer did not return a certificate -- No CAs known to server for verification?

which indicates the gitlab-runner is not sending a client TLS certificate.

If I disable the client TLS authentication on Apache rev proxy it works just fine.
Same certificate and key are working to clone or access on Web UI of same Gitlab server without any issues.

If I set inexistent cert or key files I don’t get any err, but if one of them is a directory, I’m getting err:

Trying to load mycert.pem and mykey.key pair...
ERROR: Failed to load [...]

as expected according to

I reproduced same behaviour on MacOS Mojave 10.14.3 and docker runner gitlab/gitlab-runner:latest

Many thanks in advance for your help !


TLS client authentication was configured at Location level in Apache. Once moved to VirtualHost level problem was solved.