I run into an issue cloning a repository hosted on a GitHub Enterprise using a self signed certificate.
The workaround using a custom clone step with
skip_verify: true is working, but I want to avoid this since I have the certificate on my host.
I tried running directly the
drone/git docker image (since it’s the one use for the clone) and if I add the mount option
-v /etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt:/etc/ssl/certs/ca-certificates.crt the ssl problem disappear.
So I tried to reproduce that with 2 tests on the drone server (single machine, no agents):
- adding the environment var
- adding a volume
--volume=/etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt:/custom-ca-certificates.crtand the environment var
But none of this has worked (SSL certificate problem: unable to get local issuer certificate).
Did I miss something here ? Is it possible to mount a custom certs bundle, and if so do someone knows how to do it ?
Drone 1.2.2 running on docker on a Red Hat Enterprise Linux Server release 7.6 (Maipo)