How to use dep with private repos?

[mgtest42]

How to install dependency from the private repository with a self-signed certificate? The gitlab isn't available by http, https is self-signed, and we can't change it or its settings - it belongs to another company, we just work in this repo temporarily.

What version of dep are you using (dep version)?

dep:
 version     : v0.4.1
 build date  : 2018-01-27
 git hash    : 37d9ea0
 go version  : go1.9.3
 go compiler : gc
 platform    : darwin/amd64

What dep command did you run?

dep ensure -v -add gitlab.example.com:example/example

What did you expect to see?

Installing my dependency.

What did you see instead?

The error:

Fetching sources...
(1/1) gitlab.example.com:example/example

Failed to add the dependencies:

  ✗ could not infer project root from dependency path: gitlab.example.com: unable to deduce repository and source type or "gitlab.example.com": unable to read metadata: unable to fetch raw metadata: failed HTTP request to URL "http://gitlab.example.com?go-get=1": Get https://gitlab.example.com:443/?go-get=1: x509: certificate signed by unknown authority

adding dependencies failed

[crezam]

Have you tried with the .vcs suffix? In your case: gitlab.example.com:port/example.git

[mgtest42]

The same thing.
And I think, I misunderstood the reason. I thought that the problem is in "private repo", but it's in fact that repo isn't available by http. It's only available by https with self-signed certificate and dep doesn't provide the ability to disable security checks.

[theckman]

@mgtest42 you should add the signing CA to your system's list of root CAs. If you're not comfortable with that, you should add just that certificate as being trusted in your system's certificate store. I think then dep should be able to trust it.

[themanifold]

For anyone reading this, you can specify a directory which contains your certificate(s), or even just the file itself: https://golang.org/pkg/crypto/x509/

SSL_CERT_FILE=/path/to/x509_encoded_cert_file dep ensure
SSL_CERT_DIR=/path/to/dir/ dep ensure

Other relevant links: golang/go#14310