Cloning problem over SSL

Support
, ,
22

It seems that the CA certificates are not found. This should be mainly related to the VCSServer. Here are some options to try out in order to verify this assumption:

  • Set an environment variable SSL_CERT_FILE for the VCSServer, pointing to ~/.rccontrol-profile/etc/ca-bundle.crt.
  • Place a CA bundle in the default location, this should be /etc/ssl/certs/ca-certificates.crt.

My suggestion is to try the first method by changing the file ~/.rccontrol/supervisord/supervisord.ini:

Look for a section called program:vcsserver-1_script and add a line like the following:

environment = SSL_CERT_FILE="/home/user/.rccontrol-profile/etc/ca-bundle.crt"

This way the VCServer will know where to look for the certificate bundle. After making the adjustments, the VCSServer should be restarted.

The whole section inside of the modified file supervisord.ini would look like the following example:

[program:vcsserver-1_script]
numprocs = 1
redirect_stderr = true
_port = 10002
_host = 127.0.0.1
command = /home/user/.rccontrol/vcsserver-1/profile/bin/vcsserver --config=/home/user/.rccontrol/vcsserver-1/vcsserver.ini
autostart = true
environment = SSL_CERT_FILE="/home/user/.rccontrol-profile/etc/ca-bundle.crt"
directory = /home/user/.rccontrol/vcsserver-1
stdout_logfile = /home/user/.rccontrol/vcsserver-1/vcsserver.log

Additional notes:

  • If you have multiple instances of the VCSServer running, you will have to replace vcsserver-1 with the correct instance name.
  • SSL_CERT_DIR should also be supported, this might be useful for more specific use cases where also custom CA certificates should be supported.