How do I resolve the "git clone problem with the ssl CA cert" error?

Asked

Viewed 2,235 times

1

I am trying to install SSL Let’s Encrypt, using certbot, I am using the following command:

git clone https://github.com/certbot/certbot

But the following message returns:

fatal: Unable to access 'https://github.com/certbot/certbot/': Problem with the SSL CA cert (path? access Rights?)

I wonder what I should do to fix this problem.

git ssl

  • Do you really need to (really need) clone? It’s so easy to install certbot using the distribution repository...

1 answer

2

Applying a bypass

You can try a bypass, that is, disable the verification of ssl in the settings or at runtime.

Globally modifies via command line

git config http.sslVerify false

Modifies at runtime, i.e., only for the current session

env GIT_SSL_NO_VERIFY=true git clone https://git.....

Be aware that there are security implications when disabling verification. Use this feature only when unavoidable.

Another coarse way is in the git settings file, remove the line

[http]
sslCAinfo = /local/do/cert/curl-ca-bundle.crt

Setting up a valid certificate (cacert.pem)

However, it is correct to set up a valid certificate.

To do this, download cacert.pem:

curl http://curl.haxx.se/ca/cacert.pem -o /local/onde/quer/salvar/cacert.pem

Then edit the git settings file

[http]
sslCAinfo = /local/onde/salvou/o/cacert.pem

Tip: Another way to edit settings per command line:

git config --global http.sslCAinfo "/local/onde/salvou/o/cacert.pem"

  • Daniel, thank you very much. Unfortunately I have a permission error. I think I will have to reset the server. Since I was able to pass the first parts of the automatic installation, however, I am not able to finish the installation because "default-ssl.conf.save" is not accessible.

Browser other questions tagged git ssl

You are not signed in. Login or sign up in order to post.