title: Invoking Webhook from GitLab returns SSL error
body: <p>When creating a Webhook in GitLab 11.0.2 and testing it, I get this back this error:</p>
  
  <pre><code>Hook execution failed: SSL_connect returned=1 errno=0 state=SSLv2/v3 read server hello A: tlsv1 alert internal error
  </code></pre>
  
  <p>The Webhook URI is using HTTPS with a <strong>public</strong> certificate (<strong>not self signed</strong>).</p>
  
  <p><code>SSL verification</code> is disabled for this Webhook.</p>
  
  <p><strong>Update</strong></p>
  
  <p>I upgraded <code>openssl1.0.2g</code> to <code>openssl1.0.2o</code> but the error remains.</p>
  
  <p>Then I tried to run:</p>
  
  <pre><code>openssl s_client -connect mywebhookhost:443
  </code></pre>
  
  <p>That resulted in:</p>
  
  <pre><code>depth=1 C = BE, O = GlobalSign nv-sa, CN = GlobalSign Organization Validation CA - SHA256 - G2
  verify error:num=20:unable to get local issuer certificate
  </code></pre>
  
  <p><strong>Update 2</strong></p>
  
  <p><code>/opt/gitlab/embedded/bin/ruby -ropenssl -e 'puts OpenSSL::OPENSSL_VERSION'</code> </p>
  
  <p>returns</p>
  
  <p><code>OpenSSL 1.0.2o  27 Mar 2018</code></p>
  
  <p><strong>Update 3</strong></p>
  
  <p>GlobalSign CA certs are installed</p>
  
  <pre><code> awk -v cmd='openssl x509 -noout -subject' '
  &gt;     /BEGIN/{close(cmd)};{print | cmd}' &lt; /etc/ssl/certs/ca-certificates.crt | grep GlobalSign
  </code></pre>
  
  <p>results in </p>
  
  <pre><code>subject=OU = GlobalSign ECC Root CA - R4, O = GlobalSign, CN = GlobalSign
  subject=OU = GlobalSign ECC Root CA - R5, O = GlobalSign, CN = GlobalSign
  subject=C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
  subject=OU = GlobalSign Root CA - R2, O = GlobalSign, CN = GlobalSign
  subject=OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
  </code></pre>