Skip to content

Commit 1ab3740

Browse files
committed
Correctly specify where CA store comes from
CAcert.org does not make a collection of trusted root CAs. GitLab Omnibus uses Curl's version of Mozilla's trust store: https://gitlab.com/gitlab-org/omnibus-gitlab/-/blob/e20cbf834fbc3d0ec6e07c9f6c107f5df8a3eb87/config/software/cacerts.rb#L35 I think this error resulted from confusing the `cacert.pem` file (which is the name for any file that contains a collection of CAs), and the `CAcert.org` non-profit (which is a non-profit CA). Signed-off-by: syvb <[email protected]>
1 parent e20cbf8 commit 1ab3740

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

doc/settings/ssl/index.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -593,9 +593,9 @@ individual custom certs in the `/etc/gitlab/trusted-certs` directory. They then
593593
get added to the bundle. They are added using openssl's `c_rehash` method, which
594594
only works on a [single certificate](#using-a-custom-certificate-chain).
595595
596-
GitLab ships with the official [CAcert.org](http://www.cacert.org/)
597-
collection of trusted root certification authorities which are used to verify
598-
certificate authenticity.
596+
The Linux package ships with the official
597+
[Mozilla](https://wiki.mozilla.org/CA/Included_Certificates) collection of trusted root
598+
certification authorities which are used to verify certificate authenticity.
599599
600600
NOTE:
601601
For installations that use self-signed certificates, the Linux package

0 commit comments

Comments
 (0)