It took me 60 hours of research to find that adding a rather obscure setting would make GitLab recognize my internal network root CA.