---
title: "Discussion on \"GitLab Runner on LAN with self-signed certificates\" | Hashnode"
description: "Discussion on \"GitLab Runner on LAN with self-signed certificates\". How to register GitLab Runner on LAN (Local Area Network) with GitLab server running self-signed SSL certificate."
url: "https://hashnode.com/posts/gitlab-runner-on-lan-with-self-signed-certificates/63d5726fb362bc97e797c7fe"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [GitLab Runner on LAN with self-signed certificates](https://techgrunt.io/gitlab-runner-on-lan-with-self-signed-certificates?utm_source=hashnode&utm_medium=feed)

How to register GitLab Runner on LAN (Local Area Network) with GitLab server running self-signed SSL certificate.

Jan 28, 2023 · 6 min read · techgrunt.io  
Read the article

-   [#gitlab](https://hashnode.com/tag/gitlab)
-   [#gitlab-runner](https://hashnode.com/tag/gitlab-runner)

## Written by

[terii](https://hashnode.com/@twyx)

@twyx · Austin, TX

  
[View profile](https://hashnode.com/@twyx)

Glorified IT grunt

Ex-military. Disgruntled.

## Responses 1

Markdown supported · ⌘↵ to post

[Alex](https://hashnode.com/@sorcer)

[Mar 19, 2023](https://hashnode.com/posts/gitlab-runner-on-lan-with-self-signed-certificates/63d5726fb362bc97e797c7fe/comment/6417923397db1bd550a2e229)

Hello, thank you for this article. I had created cert by command: sudo openssl req -x509 -nodes -days 3650 -newkey rsa:4096 -sha256 -keyout /etc/ssl/private/nginx-selfsigned-gitlab.key -out /etc/ssl/certs/nginx-selfsigned-gitlab.crt -subj "/C=US/ST=NY/L=NY/O=GL/OU=GL/CN=gitlab.site" -addext "subjectAltName = DNS:gitlab.site" So I just copy and rename it to ca.crt. I dont understand why I need create 2 cert for this (ca.crt and gitlab.crt)?

[terii](https://hashnode.com/@twyx)

[Apr 20, 2023](https://hashnode.com/posts/gitlab-runner-on-lan-with-self-signed-certificates/63d5726fb362bc97e797c7fe/comment/6417923397db1bd550a2e229#reply-6441ad79fe9ffd14e5b035c6)

The "ca.crt" in my guide is part of the signing chain.

You renamed your "nginx-selfsigned-gitlab.crt" to "ca.crt"? If that's the case I think this is the 'intermediate' chain cert you need to cp to your gitlab runner. The part "cp ca.crt /srv/gitlab-runner/ssl/" in my guide.