Mercurial > hg > Blog
comparison content/Jenkins/git-vs-self-signed-cert.md @ 111:bb513b8b0caf
Blog Post about Jenkins and self signed certificates
| author | Dirk Olmes <dirk.olmes@codedo.de> |
|---|---|
| date | Mon, 04 Apr 2022 15:36:16 +0200 |
| parents | |
| children |
comparison
equal
deleted
inserted
replaced
| 110:be0331916375 | 111:bb513b8b0caf |
|---|---|
| 1 Title: Configuring Jenkins to accept a self signed https certificate for git | |
| 2 Date: 2022-03-31 | |
| 3 Lang: en | |
| 4 | |
| 5 I recently did a setup of [Jenkins](https://www.jenkins.io) that had to access git repositories via https on a server that only had a self signed certificate. Here are the bits and pieces that I had to configure. | |
| 6 | |
| 7 ## Ignoring SSL warnings in git | |
| 8 | |
| 9 Since all git traffic was internal I chose not to bother too much about this isssue and just disable http certificate checks in git. If you run the command | |
| 10 | |
| 11 ::shell | |
| 12 git config --global http.sslVerify true | |
| 13 | |
| 14 an entry like this will be added to your `.gitconfig`: | |
| 15 | |
| 16 :::shell | |
| 17 [http] | |
| 18 sslVerify = false | |
| 19 | |
| 20 We'll have to put this `.gitconfig` in a couple of places to enable Jenkins accessing the git server. | |
| 21 | |
| 22 ## Jenkins master | |
| 23 Certain operations are performed on the master itself, e.g. scanning the repo for branches in multibranch pipelines. The `.gitconfig` mentioned above must be placed into `/var/jenkins_home/.gitconfig` on the master. In my case this was a Docker setup so I mounted the file into the container. | |
| 24 | |
| 25 ## Jenkins worker | |
| 26 Before the first build step of a pipeline actually runs Jenkins does a git checkout on the worker node. Even if you choose to run your build inside a Docker container the checkout happens before the container is actually started. So the user running the Jenkins agent must be configured with the `.gitconfig` mentioned above, too. | |
| 27 | |
| 28 ## Not covered here | |
| 29 I'm sure there are other places where a git checkout happens in Jenkins, e.g. if you do a checkout as part of a pipeline using the `checkout()` function in a Jenkinsfile. Since I don't use that functionality right now I did not bother to go into details here. |