-
Task
-
Resolution: Done
-
Major
-
3.0.1.GA
-
False
-
None
-
False
-
Release Notes
-
-
Known Issue
-
Done
We have a user reporting that the container 'project-clone' is failing to clone the project's source code from bitbucket. The customer is using a custom TLS certificate signed by a custom intermediate CA.
The user finds that they can clone the bitbucket repo if they open a terminal window and type 'git clone' with the http.sslCAInfo pointing to /public-certs/ca-certs.ca-bundle.crt. This tells us that the file ca-certs.ca-bundle.crt contains the right CA certs.
What is in question is if project-clone correctly gets the CA certs from the mount /public-certs. (/public-certs/ca-certs.ca-bundle.crt seems to have gotten the right contents from CM che-trusted-ca-certs because the experiment above with git CLI succeeds.) But does project-clone seek out the right file?
If project-clone seems to be accessing the right certs, something else must be wrong. Please consider possibilities, discuss, etc.
Thank you!