SSL issue with helper_image = 17.9.0

Summary

I get an SSL error:

SSL certificate problem: unable to get local issuer certificate

if I'm using gitlab-runner-17.9.0 with gitlab-helper-images-17.9.0 .

The error goes away, and pipelines start running again, if I use gitlab-runner-17.9.0 with gitlab-runner-helper-17.8.0.

So adding

helper_image = "registry.gitlab.com/gitlab-org/gitlab-runner/gitlab-runner-helper:x86_64-v17.8.0"

to config.toml fixes it for me.

Any help appreciated to further circle in the bug!

Steps to reproduce

.gitlab-ci.yml

Any gitlab CI job fails

Relevant logs and/or screenshots

job log

Running with gitlab-runner 17.9.0 (c4cbe9dd)
  on XXXXX
Preparing the "docker" executor 00:03
Using Docker executor with image aergus/latex ...
Pulling docker image aergus/latex ...
Using docker image sha256:cd60a29f3d2b195120b72b1692b37601e364c605409c63fae0827600cac9e235 for aergus/latex with digest aergus/latex@sha256:09b8b4690d0e414ed7e87734d6559016a1b4475a54ef91d1d3ef255c90d68edb ...
Preparing environment 00:01
Running on runner-t1kjfut-project-1560-concurrent-0 via XXXXXXX...
Getting source from Git repository 00:01
Fetching changes with git depth set to 20...
Reinitialized existing Git repository in /builds/XXXXXXX/.git/
fatal: unable to access 'https://XXXXXXX.git/': SSL certificate problem: unable to get local issuer certificate
Cleaning up project directory and file based variables 00:00
ERROR: Job failed: exit code 1

Environment description

this is a self-hosted installation

config.toml contents

concurrent = 4
check_interval = 0
user = "gitlab-runner"
shutdown_timeout = 0

[session_server]
  session_timeout = 1800

[[runners]]
  name = "XXXXXX"
  url = "https://XXXXXX/ci"
  id = 0
  token = "XXXXXX"
  token_obtained_at = 0001-01-01T00:00:00Z
  token_expires_at = 0001-01-01T00:00:00Z
  tls-ca-file = "/etc/gitlab-runner/certs/XXXXXX.pem"
  executor = "docker"
  [runners.docker]
    tls_verify = false
    image = "debian:latest"
    privileged = true
    disable_entrypoint_overwrite = false
    oom_kill_disable = false
    disable_cache = false
    volumes = ["/cache"]
    shm_size = 0

Used GitLab Runner version

Version:      17.9.0
Git revision: c4cbe9dd
Git branch:   17-9-stable
GO version:   go1.23.2 X:cacheprog
Built:        2025-02-20T00:52:34Z
OS/Arch:      linux/amd64