1

So we have a self-hosted version of Atlassian BitBucket running on Ubuntu server which holds the code repository. We use a SSL certificate from DigiCert . Every year we renew the certificate which has never caused issues. However this time most of the developers are getting the following error when pushing and pulling code from GIT after the certificate was renewed

fatal: unable to access : SSL certificate problem: unable to get local issuer certificate

Another Error:

fatal: unable to access : Peer's Certificate issuer is not recognized.

However, when we try to access the website using Chrome (or any other browser), it works fine and there is no error

All searches online point to this error when you're using a self-signed or internal PKI certificate. We are totally stumped on why a certificate issued by a public authority like DigiCert is getting this error.

Any help on this would be highly appreciated.

syam
  • 799
  • 1
  • 12
  • 30
Ravi Singh
  • 431
  • 3
  • 10
  • 23
  • change ssl verification as false for time being `git config --global http.sslVerify false` – syam May 08 '18 at 05:19

1 Answers1

0

  1. Ensure the root cert is added to git.exe's certificate store as discussed here.

  2. Tell Git where to find the CA bundle by running:

    git config --system http.sslCAPath /absolute/path/to/git/certificates

or copying the CA bundle to the /bin directory and adding the following to the gitconfig file:

sslCAinfo = /bin/curl-ca-bundle.crt

  1. Reinstalling Git.

  2. Ensuring that the complete CA is present, including the root cert.

    Check www.atlassian.com more ssl errors for resolutions.

Community
  • 1
  • 1
syam
  • 799
  • 1
  • 12
  • 30