Ruby SSL_connect failure when running build, certificate verify failed
Summary
Trying to build a Ubuntu debian package using omnibus, but there is a ssl_socket_connect
error which shows Certificate verify failed while downloading gitlab-pages when bin/omnibus build gitlab
command is executed.
Steps to reproduce
Following this doc https://gitlab.com/gitlab-org/omnibus-gitlab/blob/master/doc/build/README.md to create the custom build package for Ubuntu:18.04 distribution.
Registry image used in build environment is registry.gitlab.com/gitlab-org/gitlab-omnibus-builder/ubuntu_18.04:latest
Alternative sources variable is set to true export ALTERNATIVE_SOURCES="true"
.
What is the current bug behavior?
Build fails showing the certificate verify failed error.
What is the expected correct behavior?
Build should execute and generate a deb file in the pkg folder.
Relevant logs
Relevant logs
Software: gitlab-pages] I | 2019-09-25T06:30:47+00:00 | Resolving manifest entry for gitlab-pages [Software: gitlab-pages] W | 2019-09-25T06:30:47+00:00 | Version master for software gitlab-pages was not parseable. Comparison methods such as #satisfies? will not be available for this version. [Software: gitlab-pages] W | 2019-09-25T06:30:47+00:00 | Version master for software gitlab-pages was not parseable. Comparison methods such as #satisfies? will not be available for this version. ===[GitFetcher: gitlab-pages] I | 2019-09-25T06:30:48+00:00 | Fetching from
https://gitlab.com/gitlab-org/gitlab-pages.git' [Software: unzip] I | 2019-09-25T06:30:48+00:00 | Resolving manifest entry for unzip [NetFetcher: unzip] I | 2019-09-25T06:30:48+00:00 | Downloading from
https://pilotfiber.dl.sourceforge.net/project/infozip/UnZip%206.x%20%28latest%29/UnZip%206.0/unzip60.tar.gz'Progress: |=#<Thread:0x0000559db7b2ec88@/root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/thread_pool.rb:57 run> terminated with exception (report_on_exception is true): /usr/local/lib/ruby/2.6.0/net/protocol.rb:44:in
connect_nonblock': SSL_connect returned=1 errno=0 state=error: certificate verify failed (certificate has expired) (OpenSSL::SSL::SSLError) from /usr/local/lib/ruby/2.6.0/net/protocol.rb:44:in
ssl_socket_connect' from /usr/local/lib/ruby/2.6.0/net/http.rb:996:inconnect' from /usr/local/lib/ruby/2.6.0/net/http.rb:930:in
do_start' from /usr/local/lib/ruby/2.6.0/net/http.rb:919:instart' from /usr/local/lib/ruby/2.6.0/open-uri.rb:337:in
open_http' from /usr/local/lib/ruby/2.6.0/open-uri.rb:756:inbuffer_open' from /usr/local/lib/ruby/2.6.0/open-uri.rb:226:in
block in open_loop' from /usr/local/lib/ruby/2.6.0/open-uri.rb:224:incatch' from /usr/local/lib/ruby/2.6.0/open-uri.rb:224:in
open_loop' from /usr/local/lib/ruby/2.6.0/open-uri.rb:165:inopen_uri' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/core_extensions/open_uri.rb:51:in
open_uri' from /usr/local/lib/ruby/2.6.0/open-uri.rb:736:inopen' from /usr/local/lib/ruby/2.6.0/open-uri.rb:35:in
open' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/download_helpers.rb:80:indownload_file!' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/fetchers/net_fetcher.rb:173:in
download' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/fetchers/net_fetcher.rb:86:infetch' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/software.rb:897:in
fetch' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/project.rb:1074:inblock (3 levels) in download' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/thread_pool.rb:64:in
block (4 levels) in initialize' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/thread_pool.rb:62:inloop' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/thread_pool.rb:62:in
block (3 levels) in initialize' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/thread_pool.rb:61:incatch' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/thread_pool.rb:61:in
block (2 levels) in initialize' /usr/local/lib/ruby/2.6.0/net/protocol.rb:44:inconnect_nonblock': SSL_connect returned=1 errno=0 state=error: certificate verify failed (certificate has expired) (OpenSSL::SSL::SSLError) from /usr/local/lib/ruby/2.6.0/net/protocol.rb:44:in
ssl_socket_connect' from /usr/local/lib/ruby/2.6.0/net/http.rb:996:inconnect' from /usr/local/lib/ruby/2.6.0/net/http.rb:930:in
do_start' from /usr/local/lib/ruby/2.6.0/net/http.rb:919:instart' from /usr/local/lib/ruby/2.6.0/open-uri.rb:337:in
open_http' from /usr/local/lib/ruby/2.6.0/open-uri.rb:756:inbuffer_open' from /usr/local/lib/ruby/2.6.0/open-uri.rb:226:in
block in open_loop' from /usr/local/lib/ruby/2.6.0/open-uri.rb:224:incatch' from /usr/local/lib/ruby/2.6.0/open-uri.rb:224:in
open_loop' from /usr/local/lib/ruby/2.6.0/open-uri.rb:165:inopen_uri' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/core_extensions/open_uri.rb:51:in
open_uri' from /usr/local/lib/ruby/2.6.0/open-uri.rb:736:inopen' from /usr/local/lib/ruby/2.6.0/open-uri.rb:35:in
open' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/download_helpers.rb:80:indownload_file!' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/fetchers/net_fetcher.rb:173:in
download' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/fetchers/net_fetcher.rb:86:infetch' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/software.rb:897:in
fetch' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/project.rb:1074:inblock (3 levels) in download' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/thread_pool.rb:64:in
block (4 levels) in initialize' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/thread_pool.rb:62:inloop' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/thread_pool.rb:62:in
block (3 levels) in initialize' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/thread_pool.rb:61:incatch' from /root/omnibus-gitlab/.bundle/ruby/2.6.0/bundler/gems/omnibus-cc7d78000b1d/lib/omnibus/thread_pool.rb:61:in
block (2 levels) in initialize' ERROR: Job failed: exit code 1
Environment details
- Operating System:
Ubuntu 18.04 GitLab Runner with Docker executor on DigitalOcean
- Resources
- CPU:
4 Core
- Memory total:
8GB
- Storage:
160GB SSD
- CPU: