Re: Is support for 10.8 dropped?

From: brian m. carlson <sandals@crustytoothpaste.net>
Date: Apr 22, 2018, 17:49 UTC
Message-ID: <20180422174902.GJ14631@genre.crustytoothpaste.net>
In-Reply-To: <5adc355c.rJrv6ddtapM9C9H5%perryh@pluto.rain.com>

On Sun, Apr 22, 2018 at 12:10:20AM -0700, Perry Hutchison wrote:

Show 19 quoted lines

> Eric Sunshine <sunshine@sunshineco.us> wrote:
> > On Sun, Apr 22, 2018 at 1:15 AM, Igor Korot <ikorot01@gmail.com> wrote:
> > > MyMac:git-2.17.0 igorkorot$ cat config.mak
> > > NO_GETTEXT=Yes
> > > NO_OPENSSL=Yes
> > >
> > > MyMac:dbhandler igorkorot$ /Users/igorkorot/git-2.17.0/git pull
> > > fatal: unable to access
> > > 'https://github.com/oneeyeman1/dbhandler.git/': error:1407742E:SSL
> > > routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version
> > > MyMac:dbhandler igorkorot$
> >
> > Try re-building with OpenSSL enabled (remove NO_OPENSSL from
> > config.make). You may need to build/install OpenSSL yourself to get
> > this to work.
> 
> Explanation:  "tlsv1 alert protocol version" means that the server
> requires its clients to use a newer version of TLS than what was
> used in the local build of git.

I think the issue here is that you're using a crypto library which may only support TLS 1.0 on 10.8[0]. GitHub requires TLS 1.2 as of recently. So this isn't really a problem with Git, so much as it's an incompatibility between the version of the crypto library you're using and GitHub.

I expect that due to the PCI DSS rules prohibiting new deployment of TLS 1.0, you'll continue to run into this issue more and more unless you upgrade to an OS or crypto library that supports TLS 1.2. As of June 30, TLS 1.0 will be pretty much dead on the Internet.

[0] I surmised this from https://www.ssllabs.com/ssltest/clients.html, but I don't use macOS so can't speak for certain.

-- 
brian m. carlson: Houston, Texas, US
OpenPGP: https://keybase.io/bk2204