git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Git 1.7.5 problem with HTTPS

From
DSDmitry Smirnov <divis1969@gmail.com>
Date
Nov 15, 2011, 13:52 UTC
Message-ID
<CACf55T6BGds_D=nbb8G=m+Jwr+bHFruCs-Q0+FOO+WXitXEJ-g@mail.gmail.com>
Hi,
I have problems with downloading Android code from android.googlesource.com.
The error says: fatal: branch stable is not signed

I was trying to figure out what happens and finally came to conclusion that this is a problem of the git.

When I try to clone the git itself using https (https://git.kernel.org/pub/scm/git/git.git) I'm getting the follwing error: warning: remote HEAD refers to nonexistent ref, unable to checkout.

If I use the http URL (http://git.kernel.org/pub/scm/git/git.git) I can clone with no problems.

I was also considering that the problem is caused by proxy. But when I tried to clone the same git source from another host via the same proxy, it works pretty good. The difference is the git version: on the first host it is 1.7.5.4 (comes with Ubuntu 11.10), on the second - 1.7.0.4

I was trying to collect some tcpdump and it shows the follwoing sequence 15 1.962132 X.X.X.X Y.Y.Y.Y HTTP 204 CONNECT git.kernel.org:443 HTTP/1.1 17 3.687364 Y.Y.Y.Y X.X.X.X HTTP 105 HTTP/1.0 200 Connection established 19 3.764793 X.X.X.X Y.Y.Y.Y TLSv1 208 Client Hello 21 3.815135 X.X.X.X Y.Y.Y.Y TLSv1 215 Ignored Unknown Record 23 4.045326 Y.Y.Y.Y X.X.X.X TLSv1 2239 Server Hello, Certificate, Server Key Exchange, Server Hello Done 25 4.055059 Y.Y.Y.Y X.X.X.X TLSv1 73 Alert (Level: Fatal, Description: Protocol Version)

As you can see, session seems terminated with fatal alert. It looks
like client tries to use TLS 1.2 but server accepts only TLS 1.0. But
this is just assumption.
Also, it is no clear what is that Ignored Unknown Record. But it
contains uncripted text: GET
/pub/scm/git/git.git/info/refs?service=git-upload-pack HTTP/1.1
User-Agent: git/1.7.5.4 Host: git.kernel.org Accept: */* Pragma:
no-cache
So, any suggesstions?
Dmitry
Next: Shawn Pearce
Message 1 of 13 in “Git 1.7.5 problem with HTTPS”
  1. Dmitry SmirnovNov 15, 2011
  2. Shawn PearceNov 15, 2011
  3. Junio C HamanoNov 15, 2011
  4. Dmitry SmirnovNov 16, 2011
  5. Junio C HamanoNov 16, 2011
  6. Tay Ray ChuanNov 16, 2011
  7. Dmitry SmirnovNov 16, 2011
  8. Daniel StenbergNov 16, 2011
  9. Dmitry SmirnovNov 16, 2011
  10. Jonathan NiederNov 16, 2011
  11. Dmitry SmirnovNov 16, 2011
  12. Haitao LiNov 16, 2011
  13. Dmitry SmirnovNov 17, 2011

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.