{"thread":{"id":"48356","subject":"git https and github","startedAt":"2018-04-25T00:32:18Z","lastAt":"2018-04-25T17:44:57Z","messageCount":2,"participants":["Lev","Beat Bolli"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"345722","messageId":"20180425023208.5e76e93d@jive","threadId":"48356","inReplyTo":null,"subject":"git https and github","fromName":"Lev","fromEmail":"leventelist@gmail.com","sentAt":"2018-04-25T00:32:08Z","receivedAt":"2018-04-25T00:32:18Z","isPatch":false,"sender":{"key":"leventelist@gmail.com","avatar":null},"body":"Hi list,\n\n\nI'm struggling with git connecting to Github.\n\nThe problem might be SSL/TLS related.\n\nhttps://githubengineering.com/crypto-removal-notice/\n\nI suspect that my setup still uses tlsv1 or tlsv1.1.\n\nI've tried to explicitly set git to use tlsv1.2 in my .gitconfig file\nlike this:\n\n[http]\n\tsslVersion = tlsv1.2\n\nI've tried to re-compile git with OpenSSL and GnuTLS. All give the\nsame error.\n\ngit clone https://github.com/OnionIoT/source.git\nCloning into 'source'...\n* Couldn't find host github.com in the .netrc file; using defaults\n*   Trying 192.30.253.112...\n* TCP_NODELAY set\n* Connected to github.com (192.30.253.112) port 443 (#0)\n* ALPN, offering http/1.1\n* Cipher selection:\nALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH\n* successfully set certificate verify locations:\n*   CAfile: /etc/ssl/certs/ca-certificates.crt\n  CApath: /etc/ssl/certs\n* error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol\nversion\n* Curl_http_done: called premature == 1\n* stopped the pause stream!\n* Closing connection 0\nfatal: unable to access 'https://github.com/OnionIoT/source.git/':\nerror:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol\nversion lev@jive:~/git$ unset GIT_SSL_VERSION lev@jive:~/git$ git clone\nhttps://github.com/OnionIoT/source.git Cloning into 'source'...\n* Couldn't find host github.com in the .netrc file; using defaults\n*   Trying 192.30.253.112...\n* TCP_NODELAY set\n* Connected to github.com (192.30.253.112) port 443 (#0)\n* ALPN, offering http/1.1\n* Cipher selection:\nALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH\n* successfully set certificate verify locations:\n*   CAfile: /etc/ssl/certs/ca-certificates.crt\n  CApath: /etc/ssl/certs\n* error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol\nversion\n* Curl_http_done: called premature == 1\n* stopped the pause stream!\n* Closing connection 0\nfatal: unable to access 'https://github.com/OnionIoT/source.git/':\nerror:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol version\n\n\nI can connect to other git servers without any error. This is a debian\nstable system with the following components:\n\n\tgit version 2.11.0\n\n\tlibcurl 7.52.1\n\n\tOpenSSL 1.0.2l\n\n\nIs there any way to know what is the exact protocol used? Are there any\nworkaround, fix for this issue?\n\nAny help welcome. Thank you,\nLevente\n\n-- \nLevente Kovacs\nSenior Electronic Engineer\n\nW: http://levente.logonex.eu\n"},{"id":"345825","messageId":"f1f59f0d-711c-f8e5-8bc1-13db49f7101b@drbeat.li","threadId":"48356","inReplyTo":"20180425023208.5e76e93d@jive","subject":"Re: git https and github","fromName":"Beat Bolli","fromEmail":"dev+git@drbeat.li","sentAt":"2018-04-25T17:44:36Z","receivedAt":"2018-04-25T17:44:57Z","isPatch":false,"sender":{"key":"dev+git@drbeat.li","avatar":"https://avatars.githubusercontent.com/u/21444?v=4"},"body":"On 25.04.18 02:32, Lev wrote:\n> Hi list,\n> \n> \n> I'm struggling with git connecting to Github.\n> \n> The problem might be SSL/TLS related.\n> \n> https://githubengineering.com/crypto-removal-notice/\n> \n> I suspect that my setup still uses tlsv1 or tlsv1.1.\n> \n> I've tried to explicitly set git to use tlsv1.2 in my .gitconfig file\n> like this:\n> \n> [http]\n> \tsslVersion = tlsv1.2\n\nThis is the default, so this setting should not be needed, unless it's\noverridden in some higher prioritized git config file. Have you tried\n\n    git -c http.sslVersion=tlsv1.2 clone <URL>\n\n? This should override any settings files.\n\n> I've tried to re-compile git with OpenSSL and GnuTLS. All give the\n> same error.\n> \n> git clone https://github.com/OnionIoT/source.git\n> Cloning into 'source'...\n> * Couldn't find host github.com in the .netrc file; using defaults\n> *   Trying 192.30.253.112...\n> * TCP_NODELAY set\n> * Connected to github.com (192.30.253.112) port 443 (#0)\n> * ALPN, offering http/1.1\n> * Cipher selection:\n> ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH\n> * successfully set certificate verify locations:\n> *   CAfile: /etc/ssl/certs/ca-certificates.crt\n>   CApath: /etc/ssl/certs\n> * error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol\n> version\n> * Curl_http_done: called premature == 1\n> * stopped the pause stream!\n> * Closing connection 0\n> fatal: unable to access 'https://github.com/OnionIoT/source.git/':\n> error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol\n> version lev@jive:~/git$ unset GIT_SSL_VERSION lev@jive:~/git$ git clone\n> https://github.com/OnionIoT/source.git Cloning into 'source'...\n> * Couldn't find host github.com in the .netrc file; using defaults\n> *   Trying 192.30.253.112...\n> * TCP_NODELAY set\n> * Connected to github.com (192.30.253.112) port 443 (#0)\n> * ALPN, offering http/1.1\n> * Cipher selection:\n> ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH\n> * successfully set certificate verify locations:\n> *   CAfile: /etc/ssl/certs/ca-certificates.crt\n>   CApath: /etc/ssl/certs\n> * error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol\n> version\n> * Curl_http_done: called premature == 1\n> * stopped the pause stream!\n> * Closing connection 0\n> fatal: unable to access 'https://github.com/OnionIoT/source.git/':\n> error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol version\n> \n> \n> I can connect to other git servers without any error. This is a debian\n> stable system with the following components:\n> \n> \tgit version 2.11.0\n> \tlibcurl 7.52.1\n> \tOpenSSL 1.0.2l\n\nThis OpenSSL version is certainly recent enough to support TLSv1.2. Are\nyou sure you ran the newly compiled git binary?\n\n(Sorry for asking stupid questions; it's sometimes difficult to get to\nthe root of a problem)\n\n> \n> \n> Is there any way to know what is the exact protocol used? Are there any\n> workaround, fix for this issue?\n> \n> Any help welcome. Thank you,\n> Levente\n> \n\n\nCheers,\nBeat\n\n"}]}