[PR #3708] [MERGED] Run update-ca-certificates to enable self-signed certs #17052

New Issue

GiteaMirror · 2025-11-02T12:25:10-06:00

GiteaMirror commented

2025-11-02 12:25:10 -06:00

📋 Pull Request Information

Original PR: https://github.com/go-gitea/gitea/pull/3708
Author: @inful
Created: 3/22/2018
Status: ✅ Merged
Merged: 3/25/2018
Merged by: @lafriks

Base: master ← Head: patch-1

📝 Commits (3)

97dfcfd Update certificates to enable self-signed certs
dd42cbf Merge branch 'master' into patch-1
2a3bf41 Merge branch 'master' into patch-1

📊 Changes

1 file changed (+2 additions, -0 deletions)

View changed files

📝 docker/etc/s6/gitea/setup (+2 -0)

📄 Description

Why:

We are using self-signed ssl certificates for internal services, which results in failures when gitea tries to communicate through webhooks with these. We would like to enable gitea to be able to use these certificates without having to build custom docker images.

How

We add the internal certificates to /usr/local/share/ca-certificates on the host
We read-only mount /usr/local/share/ca-certificates from the host to /usr/local/share/ca-certificates in the container
We do a update-ca-certificates in the alpine container before starting gitea

This should have no consequence for users that do not have the need to handle self-signed certificates, as update-ca-certificates should be idempotent.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/go-gitea/gitea/pull/3708 **Author:** [@inful](https://github.com/inful) **Created:** 3/22/2018 **Status:** ✅ Merged **Merged:** 3/25/2018 **Merged by:** [@lafriks](https://github.com/lafriks) **Base:** `master` ← **Head:** `patch-1` --- ### 📝 Commits (3) - [`97dfcfd`](https://github.com/go-gitea/gitea/commit/97dfcfd7333adbc121dae9cacdae38313907e086) Update certificates to enable self-signed certs - [`dd42cbf`](https://github.com/go-gitea/gitea/commit/dd42cbf0557d5a8e1b03b629fdd0af9f3406ac29) Merge branch 'master' into patch-1 - [`2a3bf41`](https://github.com/go-gitea/gitea/commit/2a3bf41e0df927a6700c9666a7edef92e6d5e88e) Merge branch 'master' into patch-1 ### 📊 Changes **1 file changed** (+2 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `docker/etc/s6/gitea/setup` (+2 -0) </details> ### 📄 Description Why: * We are using self-signed ssl certificates for internal services, which results in failures when gitea tries to communicate through webhooks with these. We would like to enable gitea to be able to use these certificates without having to build custom docker images. How * We add the internal certificates to /usr/local/share/ca-certificates on the host * We read-only mount /usr/local/share/ca-certificates from the host to /usr/local/share/ca-certificates in the container * We do a update-ca-certificates in the alpine container before starting gitea This should have no consequence for users that do not have the need to handle self-signed certificates, as update-ca-certificates should be idempotent. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

GiteaMirror added the pull-request label 2025-11-02 12:25:10 -06:00

GiteaMirror closed this issue

2025-11-02 12:25:10 -06:00

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/gitea#17052