GitLab-CE EL9 repo access issue - SSL certificate problem: EE certificate key too weak

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

Summary

Updating and installation of GitLab Omnibus on EL9 (CentOS Stream 9, RHEL 9) is not possible at the moment.

Steps to reproduce

  1. install either CentOS Stream 9 or RHEL 9
  2. try to start GitLab-CE Omnibus installation

or if already installed and you want to update:

  1. dnf update gitlab-ce

What is the current bug behavior?

root@EL9 # curl -s https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/script.rpm.sh | sudo bash
gitlab_gitlab-ce-source                                                  0.0  B/s |   0  B     00:00    
Errors during downloading metadata for repository 'gitlab_gitlab-ce-source':
  - Curl error (60): SSL peer certificate or SSH remote key was not OK for https://packages.gitlab.com/gitlab/gitlab-ce/el/9/SRPMS/repodata/repomd.xml [SSL certificate problem: EE certificate key too weak]
Error: Failed to download metadata for repo 'gitlab_gitlab-ce-source': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Repository installed successfully.
Packages are ready to install.

Same Curl message for update:

# dnf update -y gitlab-ce
Updating Subscription Management repositories.
gitlab_gitlab-ce                                                         1.0 kB/s | 833  B     00:00    
gitlab_gitlab-ce                                                         9.8 kB/s | 3.1 kB     00:00    
gitlab_gitlab-ce                                                          21 kB/s | 7.0 kB     00:00    
gitlab_gitlab-ce                                                          13 kB/s | 3.8 kB     00:00    
gitlab_gitlab-ce                                                         1.2 kB/s | 833  B     00:00    
Error: Failed to download metadata for repo 'gitlab_gitlab-ce': repomd.xml GPG signature verification error: Bad GPG signature

What is the expected correct behavior?

No Curl error message. Installation and update succeeds.

Relevant logs and/or screenshots

see above

Edited by 🤖 GitLab Bot 🤖