Recently, while attempting a git pull, I was confronted with the following error:
Peer's certificate issuer has been marked as not trusted by the user.The operation worked on a browser on my dev machine, and closer inspection revealed that the cert used to serve the GitLab service was valid, but for some reason the remote CentOS Linux server couldn’t pull from the remote.
I found this post on StackOverflow detailing how to retrieve the X509 cert used to secure an HTTPS connection:
echo | openssl s_client -showcerts -servername MyGitServer.org -connect MyGitServer.org:443 2>/dev/null | openssl x509 -inform pem -noout -text
This was my ticket to discover why Git on my CentOS server didn’t like the certificate: the CentOS host was resolving the wrong DNS host name, and therefore using an invalid cert for the service.
