How to solve SSL certificate: self signed certificate when cloning repo from github?

Question

I just installed git for windows and tried to clone glew's repo like this

$ git clone https://github.com/nigels-com/glew.git

But I got the following error

Cloning into 'glew'...
fatal: unable to access 'https://github.com/nigels-com/glew.git/': SSL certificate problem: self signed certificate

I've seen people running into this problem and some possible workarounds.

First try

$ git -c http.sslVerify=false clone https://github.com/nigels-com/glew.git
Cloning into 'glew'...
fatal: unable to access 'https://github.com/nigels-com/glew.git/': Empty reply from server

Second try

$ git config --global http.sslVerify false
$ git clone https://github.com/nigels-com/glew.git
Cloning into 'glew'...
fatal: unable to access 'https://github.com/nigels-com/glew.git/': Empty reply from server

Then I checked for http.sslcainfo entry in the config files

$ git config --system --list
credential.helper=manager

$ git config --global --list
https.proxy=<proxy-address>
http.sslverify=false

System and global config files does not have that entry. So I tried the following which I don't know what file is reading and try to unset it.

$ git config --list
core.symlinks=false
core.autocrlf=true
core.fscache=true
color.diff=auto
color.status=auto
color.branch=auto
color.interactive=true
help.format=html
http.sslcainfo=C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt
diff.astextplain.textconv=astextplain
rebase.autosquash=true
credential.helper=manager
http.sslverify=false

$ git config --unset http.sslcainfo
fatal: not in a git directory

Tried with global and system

$ git config --global --unset http.sslcainfo
$ git clone https://github.com/nigels-com/glew.git
Cloning into 'glew'...
fatal: unable to access 'https://github.com/nigels-com/glew.git/': SSL certificate problem: self signed certificate

$ git config --system --unset http.sslcainfo
error: could not lock config file C:\Program Files\Git\mingw64/etc/gitconfig: Permission denied
error: could not lock config file C:\Program Files\Git\mingw64/etc/gitconfig: Invalid argument

I still cannot clone that github repo. Any other idea I can try to fix this problem? What am I missing?

Answer 1

Only this two config should work properly..

git config --global --unset http.proxy

git config --global http.sslVerify false

Answer 2

I know this is old, but I thought I would post the solution anyway. Per this Answer to a similar question

you can run:

git config --global http.sslBackend schannel

this will configure git to use the local windows certificate store for SSL verification.

Answer 3

You can also use the below command in the Visual Studio command prompt and then try to clone the code from repository.

C:\Program Files\Microsoft Visual Studio\2022\Enterprise>git config --global http.sslBackend schannel

Answer 4

You can disable SSL verification using the below command

git config --global http.sslVerify false

Answer 5

You're overthinking this. Git requires the SSH key to do the transfer. In order for this to work, you need an account on GitHub. If you have already generated an SSH key pair for other sites, you can reuse that one. All you need to do is log into GitHub.com and copy it there in your settings panel.

If you don't have an account, make one. If you haven't generated a key pair, that's simple:

ssh-keygen -t rsa -C "youremail@somewhere.com"

Then copy the key to your settings in GitHub.com

There are instructions all over the place on how to do this in various ways. I have a self-signed cert and I was able to clone the repo you listed.