eclipsegitlabmylyn

Invalid TLS Certificate when connecting Mylyn to Gitlab issues

I had finally founded a solution to connect Mylyn to Gitlab's Issues in this question.

It all worked well. But a few months since I had all configured out it doesn't work anymore. I'm getting this error when trying to connect:

Invalid TLS Certificate: You can disable certificate checking by setting ignoreCertificateErrors on GitlabHTTPRequestor

Anyone know how I can get rid of this message ? There is no ignoreCertificateErrors option in the preferences neither the plugin has any such configuration ? Do I have to put somethig in the ini file ? How I set ignoreCertificateErrors ?

Edit

The commands VonC gave have worked. But now I got another error:

Unknown Exception: java.io.FileNotFoundException: https://git.company/api/v3/projects?private_token=whatever

I put this url in the browser, and got the following json:

{"error":"API V3 is no longer supported. Use API V4 instead."}

So I changed the url to:

https://git.company/api/v4/projects?private_token=whatever

and the data loaded correctly. So I guess this is a problem with the connector using an outdated api. This link:

https://github.com/pweingardt/mylyn-gitlab/issues/47

tells me I probbly will have to wait a bit. I' couldnt find any configs or files where I can change this url.

But my original question was for the TLS problem which was solved, so I'll consider the question answered by VonC.

But if someone knows how could I solve this new problem in order to really get to he end of this by connecting with the site feel free to add aditional answers.

Solution

  • This is probably linked to GitLab move to GCP (Google Cloud Platform)

    Try and add it to your JDK keystore (the JDK used to run your Eclipse: it could be the embedded jdk, or one on your system)

    First get the new certificate:

    echo -n | openssl s_client -connect git.company:443 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > gitlab.chain.pem

    (replace git.company by your GitLab server domain name)

    Then add it to your JDK

    cd /path/to/jdk
jre/bin/keytool -keystore jre/lib/security/cacerts -storepass changeit -import -trustcacerts -file gitlab.chain.pem -alias NewGitLab

    Launch your Eclipse again, and try your Mylyn connector.

    Note: I confirm that, since GitLab 11.0 (July 2018), the API v3 is no longer supported. Only v4.
    See issue 36819.