SSL certificate rejected trying to access GitHub over HTTPS behind firewall

by

The problem is that you do not have any of Certification Authority certificates installed on your system. And these certs cannot be installed with cygwin’s setup.exe.

Update: Install Net/ca-certificates package in cygwin (thanks dirkjot)

There are two solutions:

  1. Actually install root certificates. Curl guys extracted for you certificates from Mozilla.

cacert.pem file is what you are looking for. This file contains > 250 CA certs (don’t know how to trust this number of ppl). You need to download this file, split it to individual certificates put them to /usr/ssl/certs (your CApath) and index them.

Here is how to do it. With cygwin setup.exe install curl and openssl packages
execute:

<!-- language: lang-bash -->

    $ cd /usr/ssl/certs
    $ curl http://curl.haxx.se/ca/cacert.pem |
      awk '{print > "cert" (1+n) ".pem"} /-----END CERTIFICATE-----/ {n++}'
    $ c_rehash

Important: In order to use c_rehash you have to install openssl-perl too.

  1. Ignore SSL certificate verification.

    WARNING: Disabling SSL certificate verification has security implications. Without verification of the authenticity of SSL/HTTPS connections, a malicious attacker can impersonate a trusted endpoint (such as GitHub or some other remote Git host), and you’ll be vulnerable to a Man-in-the-Middle Attack. Be sure you fully understand the security issues and your threat model before using this as a solution.

     $ env GIT_SSL_NO_VERIFY=true git clone https://github...

More Related Contents:

  1. Git push hangs when pushing to Github?
  2. Adding self-signed SSL certificate without disabling authority-signed ones
  3. How to install/setup TortoiseGit to work with GitHub
  4. Is there a way to cache https credentials for pushing commits?
  5. Git, fatal: The remote end hung up unexpectedly
  6. Download a single folder or directory from a GitHub repo
  7. Git keeps prompting me for a password
  8. Is it possible to create a remote repo on GitHub from the CLI without opening browser?
  9. Download single files from GitHub
  10. How can I make Jenkins CI with Git trigger on pushes to master?
  11. Git: Recover deleted (remote) branch
  12. How much of a git sha is *generally* considered necessary to uniquely identify a change in a given codebase?
  13. git – how to get default branch?
  14. SSH Key – Still asking for password and passphrase
  15. How can I check out a GitHub pull request with git?
  16. What is a bare repository and why would I need one?
  17. Set Git submodule to shallow clone & sparse checkout?
  18. How can I see the size of a GitHub repository before cloning it?
  19. A way to restrict Git branch access?
  20. Can I arrange repositories into folders on Github?
  21. fatal: The current branch master has no upstream branch
  22. Create new pull request from fork without having commits of the previous fork
  23. How to delete the last n commits on Github and locally?
  24. How to merge the remote branch and ignore the config setting?
  25. Git: Set local user.name and user.email different for each repo
  26. github: server certificate verification failed
  27. git export from github remote repository
  28. Do GitHub and GitLab support git clone’s –filter parameter?
  29. Cygwin/Git error cygheap base mismatch detected
  30. Why does ‘git commit’ not save my changes?

Leave a Comment