Issues setting up SSL on Git for Windows

316 views

Skip to first unread message

J D

unread,

May 13, 2017, 2:32:13 PM5/13/17

to git-for-windows

I used to tutorial at the following location and exported the root and the intermediate cert of my organization and added both to the ca-bundle.crt file in the Git installation at the bottom of the file.

https://blogs.msdn.microsoft.com/phkelley/2014/01/20/adding-a-corporate-or-self-signed-certificate-authority-to-git-exes-store/

I then added the following line to my git config

git config --system http.sslCAInfo D:/Git/mingw64/ssl/certs/ca-bundle.crt

git config --global http.sslCAInfo D:/Git/mingw64/ssl/certs/ca-bundle.crt

Now when I access the server remotely I can access it via http but the https throws the following exception

C:\>git clone http://hostname/J2EE/firstSite.git/

Cloning into 'firstSite'...

remote: Counting objects: 21, done.

remote: Compressing objects: 100% (15/15), done.

remote: Total 21 (delta 5), reused 12 (delta 2)

Unpacking objects: 100% (21/21), done.

C:\>git clone https://hostname/J2EE/firstSite.git/

Cloning into 'firstSite'...

fatal: unable to access 'https://hostname/J2EE/firstSite.git/': SSL certificate problem: self signed certificate in certificate chain

I also see the following in the logs

[ssl:info] [pid 1676:tid 864] SSL Library Error: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca (SSL alert number 48)