certificate verify failed (unable to get local issuer certificate) after update to 13.1.1

Gitlab was running fine on my company's server until it was updated from 13.1.0 to 13.1.1. We have another server that is running a fully licensed version of gitlab as well. We are setting up a second one running gitlab CE as a test server. This issue is in regards to gitlab CE on the test server.

Server: Ubuntu 18.04.4 LTS gitlab: version 13.1.1 omnibus installation port 80 and 443 are open. Tried turning firewall off. No change.

I've seen many others with similar issues. I've tried many different fixes but I cannot seem to get the server to pull certificates using letsencrypt for some reason. It fails every time I run sudo gitlab-ctl reconfigure or if I try to run sudo gitlab-ctl renew-le-certs

  • My gitlab.rb config:
  • external_url "https://gitlab.example.com"
  • ...
  • nginx['redirect_http_to_https'] = true
  • nginx['redirect_http_to_https_port'] = 80
  • ...
  • letsencrypt['enable'] = true
  • letsencrypt['contact_emails'] = ['xyz@xyz.com']
  • letsencrypt['auto_renew'] = true
  • letsencrypt['auto_renew_hour'] = 3
  • letsencrypt['auto_renew_minute'] = 30 # Should be a number or cron expression, if specified.
  • letsencrypt['auto_renew_day_of_month'] = "*/5"

Configuration is fairly straightforward.

I should also note I have tried leaving nginx['redirect_http_to_https'] = true and nginx['redirect_http_to_https_port'] = 80 commented out.

/opt/gitlab/embedded/ssl/certs is empty except for the readme file.

I ran the domain through letsdebug and everything checked out fine and passed HTTP-01 challenge.

I'm fairly new to gitlab and have read as much as I can on google but a little help would be greatly appreciated. Thanks!

If anyone needs me to post anything else please let me know.

Edited by Ryan Conover