Runner requires to disable SIP on El Capitan for self-signed certificate / CA
On OS X El Capitan is it required to disable Security Integrity Protection in order to allow the runner to communicate with a untrustred CA.
Is there a reason why the runner only checks in this keychain: /System/Library/Keychains/SystemRootCertificates.keychain and not also in the current user's keychain (if the runner isn't running as root)?
This would allow to add self signed certificates to the without the need of disabling SIP.
See last few posts of https://gitlab.com/gitlab-org/gitlab-ci-multi-runner/issues/31
Activity
@cuva Thanks, that is the plan.
Reassigned to @ayufan
The support for self-signed certificates is in Bleeding Edge release. It should be live in 0.7.0.
Please check the docs: https://gitlab.com/gitlab-org/gitlab-ci-multi-runner/blob/master/docs/configuration/tls-self-signed.md
