SSL connection issue
🐞 Bug report
I'm trying to set up dependabot in the private gitlab, but I'm getting certificate verify failed (self signed certificate in certificate chain) error. I followed the instructions related to the similar case https://github.com/dependabot/dependabot-script/issues/414 but adding certificates and rebuilding image didn't resolve the issue.
Dockerfile used to rebuild image
COPY cert/certificate.crt /usr/share/ca-certificates/
USER root
RUN echo certificate.crt >> /etc/ca-certificates.conf
RUN ln -sf /usr/share/ca-certificates/certificate.crt /etc/ssl/certs/certificate.pem
RUN apt-get update && apt-get install -y ca-certificates curl
RUN update-ca-certificates
App version
1.0.0-alpha.1
Execution mode
standalone
Package ecosystem
terraform
dependabot.yml
registries:
terraform:
type: terraform-registry
url: gitlab.com
token: ${{GITLAB_ACCESS_TOKEN}}
updates:
- package-ecosystem: terraform
directory: "/terraform"
schedule:
interval: "daily"
ignore:
# ignore all GitHub linguist patch updates
- dependency-name: "*"
update-types: ["version-update:semver-major"]
auto-merge: true
open-pull-requests-limit: 5
open-security-pull-requests-limit: 1
registries:
- terraform
Expected outcome
Dependabot should be able to connect to repositories on the private gitlab.
Log output
$ bundle exec rake "dependabot:update[${PROJECT_PATH?},${PACKAGE_MANAGER?},${DIRECTORY?}]"
[2023-04-07 07:48:57 +0000] WARN -- /usr/local/lib/ruby/3.1.0/net/http.rb:1203: warning: The environment variable HTTP_PROXY is discouraged. Use http_proxy.
[2023-04-07 07:48:57 +0000] WARN -- /usr/local/lib/ruby/3.1.0/net/http.rb:1203: warning: The environment variable HTTP_PROXY is discouraged. Use http_proxy.
[2023-04-07 07:48:57 +0000] ERROR -- [dep-update: module/test=>terraform=>/terraform] Dependency update execution failed with error:
[2023-04-07 07:48:57 +0000] ERROR -- [dep-update: module/test=>terraform=>/terraform] SSL_connect returned=1 errno=0 peeraddr=_ip_address_ state=error: certificate verify failed (self signed certificate in certificate chain)
Cleaning up project directory and file based variables
00:02
31ERROR: Job failed: exit code 1