Re: Commit 5841520b makes it impossible to connect to github from behind my company's firewall.

From: Johan Laenen <johan.laenen@gmail.com>
Date: Oct 21, 2015, 06:09 UTC
Message-ID: <CAA2R5K6fej+QQp-NLveUGAnrbfSVJ0Msp=ns_nRridUENiQv5g@mail.gmail.com>

Enrique Tobis <Enrique.Tobis <at> twosigma.com> writes:

> run GIT_CURL_VERBOSE=1 git pull and send the output. That should show the failing authentication method.

Please see the file in attachment,

greetings,

Johan

$ GIT_CURL_VERBOSE=1 /bin/git pull
* STATE: INIT => CONNECT handle 0x20081bd0; line 1090 (connection #-5000)
* Couldn't find host github.com in the .netrc file; using defaults
* Added connection 0. The cache now contains 1 members
*   Trying 10.192.45.149...
* STATE: CONNECT => WAITCONNECT handle 0x20081bd0; line 1143 (connection #0)
* Connected to myproxy (10.192.45.149) port 8080 (#0)
* STATE: WAITCONNECT => WAITPROXYCONNECT handle 0x20081bd0; line 1240 (connection #0)
* Establish HTTP proxy tunnel to github.com:443

> CONNECT github.com:443 HTTP/1.1

Host: github.com:443
User-Agent: git/2.5.3
Proxy-Connection: Keep-Alive

* Read response immediately from proxy CONNECT
< HTTP/1.1 407 Proxy Authentication Required
< Proxy-Authenticate: NEGOTIATE
< Proxy-Authenticate: NTLM
< Proxy-Authenticate: BASIC realm="POST_AD"
< Cache-Control: no-cache
< Pragma: no-cache
< Content-Type: text/html; charset=utf-8
< Proxy-Connection: close
< Connection: close
< Content-Length: 1025
<
* Ignore 1025 bytes of response-body
* Connect me again please
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* Unknown SSL protocol error in connection to github.com:443
* Curl_done
* Closing connection 0
* The cache now contains 0 members
* STATE: WAITPROXYCONNECT => CONNECT handle 0x20081bd0; line 1223 (connection #-5000)
* Couldn't find host github.com in the .netrc file; using defaults
* Added connection 1. The cache now contains 1 members
* Hostname myproxy was found in DNS cache
*   Trying 10.192.45.149...
* STATE: CONNECT => WAITCONNECT handle 0x20081bd0; line 1143 (connection #1)
* Connected to myproxy (10.192.45.149) port 8080 (#1)
* STATE: WAITCONNECT => WAITPROXYCONNECT handle 0x20081bd0; line 1240 (connection #1)
* Establish HTTP proxy tunnel to github.com:443

> CONNECT github.com:443 HTTP/1.1

Host: github.com:443
User-Agent: git/2.5.3
Proxy-Connection: Keep-Alive

* Read response immediately from proxy CONNECT
< HTTP/1.1 407 Proxy Authentication Required
< Proxy-Authenticate: NEGOTIATE
* gss_init_sec_context() failed: : SPNEGO cannot find mechanisms to negotiate
< Proxy-Authenticate: NTLM
< Proxy-Authenticate: BASIC realm="POST_AD"
< Cache-Control: no-cache
< Pragma: no-cache
< Content-Type: text/html; charset=utf-8
< Proxy-Connection: close
< Connection: close
< Content-Length: 1025
<
* Received HTTP code 407 from proxy after CONNECT
* Expire cleared
* Curl_done
* Closing connection 1
* The cache now contains 0 members
fatal: unable to access 'https://github.com/gargle/french/': Unknown SSL protocol error in connection to github.com:443