We are unable to get any agent to check out a repo from git (GitLab in our case). We have configured the certs and verified that both the jenkins user and the user in the credential we use to access GitLab can check out locally on the agent. When we run a build which checks out using that same credential on the same agent, the fetch fails with Peer's Certificate issuer is not recognized.

We have also configured the Jenkins master with the certs and that can check out from a build run on the master without problems. As soon as we attempt to run on an agent, we hit the same issue. We have sslVerify=false set for all users. The cert is self-signed.

It seems somehow that the authentication isn't crossing the master-agent boundary. Since git is the default RCS for Jenkins and so widely used we might be missing something but we're at a loss to know how to proceed. 

Thanks.