SSL certificate problem: certificate has expired
Yesterday my ci/cd pipeline which includes git pull
command broke. I also can not do clone anymore.
I received following error when trying clone:
fatal: unable to access 'https://git.example.com/admin/project.git/': SSL certificate problem: certificate has expired
gitlab's browser interface continued to run without any problem.
I did a manual renew of the certificate, using gitlab-ctl renew-le-certs
. But it doesn't work.
I tried removing ssl /etc/gitlab/ssl/
files to a backup and regenerating entirely fresh certificates using above command, Certificates were issued without any problem but command line error persists while cloning/taking pull.
I checked information about certificates using openssl:
openssl s_client -showcerts -servername git.example.com -connect git.example.com:443 2>/dev/null | openssl x509 -inform pem -noout -text
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:9d:f6:eb:74:0f:ba:a3:7b:3b:1d:36:85:fe:17:bf:a3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R3
Validity
Not Before: Oct 1 06:12:47 2021 GMT
Not After : Dec 30 06:12:46 2021 GMT
Gitlab v14.3.1-ee omnibus running on centos 7.9, I updated packages already.