Trust to custom CA for SSL webhook #1169

New Issue

GiteaMirror · 2025-11-02T03:51:14-06:00

GiteaMirror commented

2025-11-02 03:51:14 -06:00

Originally created by @tomas-kulhanek on GitHub (Oct 19, 2017).

Gitea version (or commit ref): Gitea Version: 5f4210a (Go1.8.3)
Git version: 1.8.3.1
Operating system: CentOS Linux release 7.4.1708 (Core)
Database (use [x]):
- PostgreSQL
- MySQL
- MSSQL
- SQLite
Can you reproduce the bug at https://try.gitea.io:
- Yes (provide example URL)
- No
- Not relevant

Please, how can i add SSL CA to trusted CA for gitea webhook?

Originally created by @tomas-kulhanek on GitHub (Oct 19, 2017). - Gitea version (or commit ref): Gitea Version: 5f4210a (Go1.8.3) - Git version: 1.8.3.1 - Operating system: CentOS Linux release 7.4.1708 (Core) - Database (use `[x]`): - [ ] PostgreSQL - [X] MySQL - [ ] MSSQL - [ ] SQLite - Can you reproduce the bug at https://try.gitea.io: - [ ] Yes (provide example URL) - [ ] No - [X] Not relevant Please, how can i add SSL CA to trusted CA for gitea webhook?

GiteaMirror added the type/question label 2025-11-02 03:51:14 -06:00

GiteaMirror closed this issue

2025-11-02 03:51:14 -06:00

GiteaMirror commented

2025-11-02 03:51:15 -06:00

@ptman commented on GitHub (Oct 19, 2017):

Golang on Linux looks for root certificates here: https://github.com/golang/go/blob/master/src/crypto/x509/root_linux.go

On CentOS:

On Fedora since 19, RHEL / CentOS 7, and RHEL / CentOS 6 since this update, the Shared System Certificates feature is available. With that system, the correct method is to place the certificate to be trusted (in PEM format) in /etc/pki/ca-trust/source/anchors/ and run sudo update-ca-trust. (If the certificate is in OpenSSL’s extended BEGIN TRUSTED CERTIFICATE format, place it in /etc/pki/ca-trust/source). On RHEL 6, you have to activate the system with update-ca-trust enable after installing the update; if you don’t want to use it, you can try the approach below.

@ptman commented on GitHub (Oct 19, 2017): Golang on Linux looks for root certificates here: https://github.com/golang/go/blob/master/src/crypto/x509/root_linux.go On CentOS: On Fedora since 19, RHEL / CentOS 7, and RHEL / CentOS 6 since this update, the Shared System Certificates feature is available. With that system, the correct method is to place the certificate to be trusted (in PEM format) in /etc/pki/ca-trust/source/anchors/ and run sudo update-ca-trust. (If the certificate is in OpenSSL’s extended BEGIN TRUSTED CERTIFICATE format, place it in /etc/pki/ca-trust/source). On RHEL 6, you have to activate the system with update-ca-trust enable after installing the update; if you don’t want to use it, you can try the approach below.

GiteaMirror commented

2025-11-02 03:51:16 -06:00

@tomas-kulhanek commented on GitHub (Oct 19, 2017):

Its working, thanks.

@tomas-kulhanek commented on GitHub (Oct 19, 2017): Its working, thanks.

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/gitea#1169