Gitlab git clone using HTTPS - unable to get local issuer certificate

Question

When I use git clone https://my.example.com/gitlab/java/repository.git, I get

Cloning into 'repository'...
fatal: unable to access 'https://my.example.com/gitlab/java/repository.git':
SSL certificate problem: unable to get local issuer certificate

It works fine if I set git config --global http.sslVerify false

Gitlab is used with Apache2 and SSL which forwards to gitlab-workhorse. More details about configuration: Gitlab HTTPS URI for repository cloning does not work - SSL host could not be verified - fatal: unable to access

I have tried adding SSL certificates as they are the same as in Apache config but it did not help:

nginx['ssl_certificate'] = "/etc/gitlab/ssl/my.example.com.crt"
nginx['ssl_certificate_key'] = "/etc/gitlab/ssl/my.example.com.key"

How to configure it to make git actions via HTTPS without disabling verification?

Answer 1

Checked SSL with https://www.sslshopper.com/ssl-checker.html and it showed some warnings while browser didn't complain about the URL. It was missing SSLCertificateChainFile /etc/apache2/ssl/1_root_bundle.crt in /etc/apache2/sites-available/default-ssl.conf.