SSL certificate problem: unable to get issuer certificate

[Jean-Pierre Delouche]

Hi,

I got some issues to run https on my git install on windows, which gives me the error message above in the subject.

Any help welcomed,

Jean-Pierre

Here are the traces:

$ GIT_CURL_VERBOSE=1 GIT_TRACE=1  git clone https://vwl8030.fr.alcatel-lucent.com:8092/git/hardwlab/vnrtlc.git vnrtlc4

14:35:21.259544 git.c:350               trace: built-in: git 'clone' 'https://vwl8030.fr.alcatel-lucent.com:8092/git/hardwlab/vnrtlc.git' 'vnrtlc4'

Cloning into 'vnrtlc4'...

14:35:21.435262 run-command.c:336       trace: run_command: 'git-remote-https' 'origin' 'https://vwl8030.fr.alcatel-lucent.com:8092/git/hardwlab/vnrtlc.git'

* Couldn't find host vwl8030.fr.alcatel-lucent.com in the _netrc file; using defaults

* timeout on name lookup is not supported

*   Trying 139.54.8.30...

* Connected to vwl8030.fr.alcatel-lucent.com (139.54.8.30) port 8092 (#0)

* ALPN, offering http/1.1

* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH

* successfully set certificate verify locations:

*   CAfile: C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt

  CApath: none

* SSL certificate problem: unable to get issuer certificate

* Closing connection 0

fatal: unable to access 'https://vwl8030.fr.alcatel-lucent.com:8092/git/hardwlab/vnrtlc.git/': SSL certificate problem: unable to get issuer certificate

I tried with openssl and got the same error messages after a connection:

CONNECTED(0000015C)

---

Certificate chain

 0 s:/C=Fr/ST=Villarceaux/L=Nozay/O=Alcatel-Lucent/OU=Alcatel-Lucent Submarine Networks R&D LNS/CN=vwl8030.fr.alcatel-lucent.com/emailAddress=un...@alcatel-lucent.com

   i:/DC=com/DC=lucent/DC=res1/CN=Nokia Internal SubCA02

---

Server certificate

-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----

verify error:num=20:unable to get local issuer certificate

verify error:num=21:unable to verify the first certificate

verify return:1

read:errno=0

[Johannes Schindelin]

Hi Jean-Pierre,

On Fri, 30 Sep 2016, Jean-Pierre Delouche wrote:

> $ GIT_CURL_VERBOSE=1 GIT_TRACE=1 git clone
> https://vwl8030.fr.alcatel-lucent.com:8092/git/hardwlab/vnrtlc.git vnrtlc4
> 14:35:21.259544 git.c:350 trace: built-in: git 'clone'
> 'https://vwl8030.fr.alcatel-lucent.com:8092/git/hardwlab/vnrtlc.git'
> 'vnrtlc4'
> Cloning into 'vnrtlc4'...
> 14:35:21.435262 run-command.c:336 trace: run_command:
> 'git-remote-https' 'origin'

> [...]

I cannot reproduce, as it always fails with:

Could not resolve host: vwl8030.fr.alcatel-lucent.com

Ciao,
Johannes