ERROR: Not a certificate: /opt/gitlab/embedded/ssl/certs/README while upgrading from 8.7.5 to 8.10.2
Hi,
i tried to update Gitlab from 8.7.5-ce.0 to 8.10.2-ce.0 on Debian Jessie 64, and it fails moving certificates. I moved the certificates by hand, but the updater complains still about README not being a valid certificate. The problem is, it places the README there itself, so deleting it does not help. I tried to delete the file as soon it is there with a bash remove loop, but then it complains about not being able to create the file. •file[/opt/gitlab/embedded/ssl/certs/README] action create ◦create new file /opt/gitlab/embedded/ssl/certs/README ◦update content in file /opt/gitlab/embedded/ssl/certs/README from none to 623059 --- /opt/gitlab/embedded/ssl/certs/README 2016-07-31 13:27:19.885920716 +0200 +++ /opt/gitlab/embedded/ssl/certs/.chef-README20160731-6303-9v3ojp 2016-07-31 13:27:19.885920716 +0200 @@ -1 +1,4 @@ +This directory is managed by omnibus-gitlab. ◦Any file placed in this directory will be ignored +. Place certificates in /etc/gitlab/trusted-certs. ◦change mode from '' to '0644'
•ruby_block[Move existing certs and link to /opt/gitlab/embedded/ssl/certs] action run
•Moving existing certificates found in /opt/gitlab/embedded/ssl/certs ERROR: /opt/gitlab/embedded/ssl/certs/README: OpenSSL error: nested asn1 error!
================================================================================
Error executing action run on resource 'ruby_block[Move existing certs and link to /opt/gitlab/embedded/ssl/certs]'
RuntimeError
ERROR: Not a certificate: /opt/gitlab/embedded/ssl/certs/README -> /home/gork/gitlab/embedded/ssl/certs/README
Cookbook Trace:
/opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/libraries/helper.rb:528:in raise_msg' /opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/libraries/helper.rb:466:inblock in move_existing_certificates' /opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/libraries/helper.rb:459:in glob' /opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/libraries/helper.rb:459:inmove_existing_certificates' /opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/recipes/add_trusted_certs.rb:31:in `block (2 levels) in from_file'
Resource Declaration:
In /opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/recipes/add_trusted_certs.rb
28: ruby_block "Move existing certs and link to #{ssl_certs_dir}" do 29: block do 30: puts "\n\n * Moving existing certificates found in #{ssl_certs_dir}\n" 31: cert_helper.move_existing_certificates 32: puts "\n * Symlinking existing certificates found in #{trusted_certs_dir}\n" 33: cert_helper.link_certificates 34: end 35: only_if { cert_helper.new_certificate_added? } 36: notifies :restart, "service[unicorn]" if OmnibusHelper.should_notify?("unicorn") 37: end
Compiled Resource:
Declared in /opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/recipes/add_trusted_certs.rb:28:in `from_file'
ruby_block("Move existing certs and link to /opt/gitlab/embedded/ssl/certs") do action [:run] retries 0 retry_delay 2 default_guard_interpreter :default block_name "Move existing certs and link to /opt/gitlab/embedded/ssl/certs" declared_type :ruby_block cookbook_name "gitlab" recipe_name "add_trusted_certs" block #Proc:0x000000044ae3c8@/opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/recipes/add_trusted_certs.rb:29 only_if { #code block } end
Platform:
x86_64-linux