Reputation: 857

Unable to pull/push in git repository

$ git pull origin master
fatal: unable to access 'https://xxxxxxxxxxxxxxx': 
      error setting certificate verify locations:
CAfile: C:/Users/abc/AppData/Local/Programs/Git/usr/bin/curl-ca-bundle.crt
CApath: none

I am getting this error when I pull or push my code.

Please guide me to fix this.

Upvotes: 49

Answers (23)

Raunak Kapoor

Reputation: 931

This issue might occur when git client is not able to find trusted CA for ssl. If you are in windows, try reinstalling it from https://gitforwindows.org/.

During the installation, select "Use the native Windows Secure Channel library" option. That option will allow you to use your company's internal Root CA certificate instead of default ca-bundle.crt

Upvotes: 5

Steven

Reputation: 46

I was having this problem after installing devel packages on cygwin.

I tried all of the fixes in this thread but nothing was working.

Then, I ran into this thread on github

I found where CAPATH was being specified in gitconfig, and I deleted that https specification, and it solved my issue.

Upvotes: 2

MemeDeveloper

Reputation: 6792

I had previously installed git, then uninstalled it.

So for me was as simple as reinstalling the correct version of git (for me win x64) from

https://git-scm.com/download/win

Upvotes: 1

Matthew Marichiba

Reputation: 2092

This thread is a lot of blind-leading-the-blind answers. I'm just one more blind man here, but I just had the same issue and solved it by following this easy article. As I understand the original question, git is trying to find an SSL cert file in order to use the HTTPS protocol, and failing to find the file. Most of the answers here seem to focus on "well, just disable SSL then," rather than replacing the file correctly.

This incantation should generate the cert file and put it in the correct location for git on cygwin:

$ curl -sL http://ca.pdinc.us > /etc/pki/ca-trust/source/anchors/ca.pdinc.us.pem \
&& update-ca-trust

In case you monkeyed with your git config (like I did) and need to set it BACK, this should do it:

$ git config --global http.sslcainfo "/etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt"

One other side note which could be impacting many of the people reading this thread: The expected location of the cert file depends on which git executable you're running. Since we're talking about Cygwin, some (most?) of us probably have a Windows-native flavor of git installed too. If your Cygwin paths are set up to find the Windows git executable, your mileage may vary in terms of where to point the http.sslcainfo configuration. To check which executable is getting picked up for you:

$ which git

Upvotes: 2

Igor Levicki

Reputation: 1613

Current Git for Windows build (2.18.0.windows.1) has a bug -- if the http.sslcainfo is not set it expects to find the certificate store in C:/Program Files/Git/mingw64/libexec/ssl/certs/ca-bundle.crt.

Certificate store is actually installed to C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt so to fix that you must specify the proper path.

Furthermore, the SCHANNEL implementation is also broken in this build.

Finally, Git credential manager is also broken because if you have CI/CO credentials stored from gitlab-runner installation it will fail to clone/push/pull with access denied error instead of prompting for different credentials.

Upvotes: 1

Soyuzbek Orozbek Uulu

Reputation: 360

Go your git directory and move the mingw64/ssl folder to mingw64/libexec/ssl

Upvotes: 2

Shreyas Murali

Reputation: 436

I ran into the same error message but while cloning a github repository, unfortunately setting the http.sslcainfo didnt quite help. As I happened to be behind a corporate proxy server, setting the http.proxy fixed it for me.

Upvotes: 0

Naor Bar

Reputation: 2209

This will do the work while moving from GIT 2.x clients to 2.5.x:

Looks like after installing a new version of GIT client, it changes the path it looks for certificates from something like this:

C:\Program Files\Git\mingw64

to something like this:

C:\Program Files\Git\mingw64\libexec

To fix this, just copy the 'ssl' folder to the new location and it'll work like a charm!

Upvotes: 2

Abubakr Elghazawy

Reputation: 985

 git config --global http.sslverify "false"

will solve the problem after that Pop-up window appear to enter your username and password make sure valid .

Upvotes: 4

René Link

Reputation: 51463

I once had the same problem. My problem occured after re-installing git for windows. I'm using git for windows 64-bit on windows 10.

I found out that the installer did not install git anymore in C:/Users/[USER_NAME]/AppData/Local/Programs/Git. Instead it installed it under C:\Program Files\Git.

Nevertheless the old config file C:\ProgramData\Git\config was not edited by the installer. This file still contains the old path so I edited it manually.

E.g. on my system I used

[http]
     sslCAInfo = C:/Programme/Git/mingw64/ssl/certs/ca-bundle.crt

maybe you will have to use Program Files instead

     sslCAInfo = C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt

EDIT

Like DS said in his comment

C:\ProgramData\Git\config needs to be edited as Administrator.

E.g. right click on notepad and select "Run as Administrator" then open the file.

Upvotes: 27

Vensent Wang

Reputation: 185

Thanks to https://github.com/npm/npm/issues/1484
git config --global http.sslverify "false" will solve the problem

Upvotes: 0

dav dai

Reputation: 21

If your git version is 2.8.1.windows.1,this may help you. First , you need to locate your git home directory,mine is D:\SDK\Git.Just in the same directory,you can find folder "usr",open it and goes to \ssl\certs,you can find the certificate:ca-bundle.crt.

Then open console,execute:
git config --system http.sslcainfo "D:\SDK\Git\usr\ssl\certscabundle.crt"

Upvotes: 2

CodeWizard

Reputation: 142532

When using https you will need to supply password or using a certificate. In your case looks like the certificate is not a valid one.

Try fixing it like this by telling git where to find the certificate:

// Add the certificate to your configuration file
git config --system http.sslcainfo "C:\Program Files (x86)\git\bin\curl-ca-bundle.crt"

Alternatively, you could disable SSL checks:

// or switch off SSL checks completely by executing:
git config --system http.sslverify false

Set this in your config to disable it only for the given url and not for all requests

[http "https://weak.example.com"]
    sslVerify = false

`http.sslVerify`

Whether to verify the SSL certificate when fetching or pushing over HTTPS.

`http.sslCAInfo`

File containing the certificates to verify the peer with when fetching or pushing over HTTPS

Upvotes: 48

deepak garg

Reputation: 41

I found the ssl certificate at :

C:\Users\[USERNAME]\AppData\Local\GitHub\PortableGit_[portable code]\usr\ssl\certs

then you can follow solution by CodeWizard i.e. :

// Add the certificate to your configuration file
git config --system http.sslcainfo "[LOCATION_SPECIFIED_ABOVE]/cabundle.crt"

Upvotes: 1

Ramkumar NJ

Reputation: 23

I got the same error in Windows 7. Found that the certificate path referred in the error was not existing. Instead of ...\mingw32\usr\ssl... the cert file was in ...\mingw2\ssl... So I created a usr folder manually and moved the entire ssl tree into usr. This fixed the issue.

Upvotes: 0

AWolf

Reputation: 8990

I've got the same error message but in my case it was because I've changed github settings to use ssh instead of https.

And the repository with the problem was cloned with https after removing the remote and re-adding it with ssh it's working as expected.

$git remote remove origin
$git remote add origin [email protected]:UserName/repo.git

Then git remote show origin is correctly showing the remote.

Upvotes: 0

cesarnet

Reputation: 21

I had the same error and I fixed it reinstalling git in the default path:

C:\Program Files\Git

That's all

Upvotes: 0

14inc

Reputation: 1

I have found the following steps useful in fixing the issue at my end for Windows 10:

Doing an uninstall of git.

However, git uninstaller doesn't do a clean job. So you may need to go delete the Git directory at C:\Users[My name]\AppData\Local\Programs\

After this, a fresh install of git should install install it in the C:\Program Files\Git directory where the config file points to in order to read the ssl certificate.

Upvotes: 0

Bimme

Reputation: 127

I got the same problem after my latest update of cygwin after installing Windows 10. The command update-ca-trust failed during installation.

The reason seem to be that the group owner for the certificate folder was corrupt. The somewhat drastic solution was to delete /etc/group, it turned out that cygwin is able to ask windows directly about group rights.

Solution found at http://zaunerc.blogspot.se/2016/01/cygwin-mapping-windows-sids-to-posix.html

Upvotes: 1

arntg

Reputation: 1617

Using Intellij and git-sdk-64, and picked git-sdk-64\mingw64\bin\git.exe at first to be getting this issue, then when switched to git-sdk-64\cmd\git.exe it figured the cert file location alone and no other configuration was needed. (have not used git config --global http.sslcainfo ...)

Upvotes: 0

stiteler

Reputation: 141

In version 2.x of git-bash The path to the .crt has changed to ../Git/mingw64/ssl/certs/ca-bundle.crt. I had to update this manually in git-bash with

 git config --global http.sslcainfo "/path/to/Git/mingw64/ssl/certs/ca-bundle.crt"

Upvotes: 14

user5710358

Reputation:

I was also facing this problem in windows and running git using gitbash. I just reinstalled gitbash, And gitbash automatically managed git certificate and its path needed.

Upvotes: 26

Prabu Guna

Reputation: 342

Try this

git config --system http.sslcainfo "C:\Program Files (x86)\git\bin\curl-ca-bundle.crt"

Switch off your SSL by running this command

git config --system http.sslverify false

Upvotes: 5

Unable to pull/push in git repository

Answers (23)

http.sslVerify

http.sslCAInfo

Related Questions

`http.sslVerify`

`http.sslCAInfo`