Resolve SSL certificate error with Git » History » Version 1
Redmine Admin, 08/06/2014 10:55 AM
| 1 | 1 | Redmine Admin | h1. Certificate handling with GIT |
|---|---|---|---|
| 2 | |||
| 3 | |||
| 4 | GIT uses cURL internally for transfering files. Unfortunately cURL uses its own certificate-store |
||
| 5 | and the certificate-chain (Telekom-CA-->DFN-CA-->TU-Clausthal) isn't included by default. |
||
| 6 | |||
| 7 | Now, when you try to access a GIT-repository you will get an error similar to this: |
||
| 8 | <pre> |
||
| 9 | git clone https://scm.in.tu-clausthal.de/git/testgit |
||
| 10 | Cloning into 'testgit'... |
||
| 11 | error: server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none while accessing https://scm.in.tu-clausthal.de/git/testgit/info/refs |
||
| 12 | </pre> |
||
| 13 | |||
| 14 | To import the certificate chain for GIT follow these steps: |
||
| 15 | 1. Locate the file |
||
| 16 | |||
| 17 | https://pki.pca.dfn.de/tu-clausthal-ca/pub/cacert/chain_sha1.txt |
||
| 18 | To import the certificate chain for GIT follow these steps: |
||
| 19 | |||
| 20 | |||
| 21 | or choose one of the following options to skip the certificate verification: |
||
| 22 | - Temporary ignore ssl certificate verification: |
||
| 23 | env GIT_SSL_NO_VERIFY=true git clone https://scm.in.tu-clausthal.de/git/PROJECTNAME |
||
| 24 | |||
| 25 | - Disable ssl verfication for one GIT repository (works after first clone): |
||
| 26 | git config http.sslVerify false |
||
| 27 | |||
| 28 | - Globally disable ssl verification (not recommended!) |
||
| 29 | git config --global http.sslVerify false |