Skip to content

SSL certificate problem: certificate has expired

Yesterday my ci/cd pipeline which includes git pull command broke. I also can not do clone anymore.

I received following error when trying clone:

fatal: unable to access 'https://git.example.com/admin/project.git/': SSL certificate problem: certificate has expired

gitlab's browser interface continued to run without any problem. I did a manual renew of the certificate, using gitlab-ctl renew-le-certs. But it doesn't work.

I tried removing ssl /etc/gitlab/ssl/ files to a backup and regenerating entirely fresh certificates using above command, Certificates were issued without any problem but command line error persists while cloning/taking pull.

I checked information about certificates using openssl:

openssl s_client -showcerts -servername git.example.com -connect git.example.com:443 2>/dev/null | openssl x509 -inform pem -noout -text

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9d:f6:eb:74:0f:ba:a3:7b:3b:1d:36:85:fe:17:bf:a3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Oct  1 06:12:47 2021 GMT
            Not After : Dec 30 06:12:46 2021 GMT

Gitlab v14.3.1-ee omnibus running on centos 7.9, I updated packages already.

Edited by Ravi Sharma