gitlab对等证书无法使用已知的CA证书进行身份验证

Question

When I setting up gitlab on centos 6 under the real ip, I meet this error finnally.

[qzi@host test]$ git push -u origin master
fatal: unable to access 'http://10.41.37.180/git/test.git/': Peer certificate cannot be     authenticated with known CA certificates

How can I solve this?

Answer 1

You have number of options:

• On an off chance that SSL verification fails due to out-of-date or absent CA certificates. sudo yum reinstall ca-certificates might help. Make sure you have them and, possibly, point git to the right path with git config http.sslCAInfo or http.sslCAPath .

• Install properly signed ceritificate on gitlab site, so your git-over-HTTPS does not complain when it sees self-signed certificate which would be fairly typical in simple setups.

• Disable SSL certificate verification with git config http.sslVerify false or set GIT_SSL_NO_VERIFY in the environment.

• use git clone git://... to clone your repo.

Answer 2

I use a selfsigned cert for offering git via https.

On Fedora clients the following can be used so the client trusts the https certificate. "fluxcoil.net_201404.cert" is the PEM file containing the https certtificate, or an own CA which has signed the https cert:

certutil -d sql:/home/chris/.pki/nssdb -A -t "P,," \
    -n "fluxcoil.net" -i /home/chris/fluxcoil.net_201404.cert

Answer 3

设置http."https://10.41.37.180/".sslCAInfo git config属性：

$ git config http." https://10.41.37.180/ ".sslCAInfo /path/to/certificate.pem