CA support

Runners on GitLab.com fail to load submodules using https to GitHub.

Running with gitlab-ci-multi-runner 1.10.4 (b32125f)
Using Docker executor with image mhart/alpine-node ...
Pulling docker image mhart/alpine-node ...
Running on runner-4e4528ca-project-1952913-concurrent-0 via runner-4e4528ca-machine-1489526414-fe7fae91-digital-ocean-4gb...
Cloning repository...
Cloning into '/builds/markpundsack/mark.pundsack.com'...
Checking out 94080187 as master...
Updating/initializing submodules recursively...
Submodule 'themes/landscape' (https://github.com/hexojs/hexo-theme-landscape.git) registered for path 'themes/landscape'
Cloning into '/builds/markpundsack/mark.pundsack.com/themes/landscape'...
fatal: unable to access 'https://github.com/hexojs/hexo-theme-landscape.git/': SSL certificate problem: unable to get local issuer certificate
fatal: clone of 'https://github.com/hexojs/hexo-theme-landscape.git' into submodule path '/builds/markpundsack/mark.pundsack.com/themes/landscape' failed
ERROR: Build failed: exit code 1

We do load CAs on docker image (https://gitlab.com/gitlab-org/gitlab-ci-multi-runner/blob/master/dockerfiles/build/Dockerfile.x86_64#L3). @ayufan theorizes that miniperl may not support CAs.

@tmaczukin Could you verify that?

changed milestone to %v9.1

@markpundsack I think we can close this as a duplicate of #2148 (closed). The problem exists because with GIT_TLS_CAINFO variable containing a certificate used by GitLab we're overriding default CA certificates.

closed