gitlab-runner-helper cache-extractor does not support CI_SERVER_TLS_CA_FILE
It seems impossible to set up a secure tls connection to cache object storage that uses a self-signed certificate.
gitlab-runner-helper artifacts-downloader (and others) have support for a --tls-ca-file (aka $CI_SERVER_TLS_CA_FILE), but for cache that doesn't work.
bash-5.1# /usr/bin/gitlab-runner-helper cache-extractor --file ../../../cache/jasmets/test4/blub-1-non_protected/cache.zip --timeout 10 --url 'https://example.com/gitlabsr-runner-cache-a59587d0-0cf4-450e-b21c-db943b955f9b/gitlab-runner/project/510/blub-1-non_protected?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=7IL71HG%2F20221012%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=2022170955Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=a7272fa6f70230ec495a38b5'
WARNING: Retrying... error=Get "https://s3.nuq.ion.nokia.net/gitlabsr-runner-cache-a59587d0-0cf4-450e-b21c-db943b955f9b/gitlab-runner/project/510/blub-1-non_protected?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=7IL7121012%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20270955Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=a727d95a38b5": x509: certificate signed by unknown authority