Use https:// instead of git:// about zfp HOT 3 CLOSED

Pull request #33 has been merged.

I am seeing the following error on my macbook while at my workplace: fatal: unable to access 'https://git.cryptomilk.org/projects/cmocka.git/': SSL certificate problem: self signed certificate in certificate chain

I've tried downloading the certificate from that URL through my browser, and then used git config --global http.sslCAinfo <path-to-downloaded-certificate> to be aware of that downloaded certificate file. However, the error message persists. Any ideas without disabling SSL verification?
https://stackoverflow.com/a/16543283
https://stackoverflow.com/q/11621768

from zfp.

The SSL certificate of cryptomilk is issued by Let's Encrypt (https://letsencrypt.org/). Let's Encrypt certificates are trusted by all major browsers by now. A screenshot from my browser (Firefox 64.0) shows the following trust chain:

I use git 2.11.0 here on RHEL 6. Which OS you use? I suspect that you have an old "Root Certificates" pool which may not include the "DST Root CA X3" certificate that forms the basis for Let's Encrypt chain-of-trust, see: https://letsencrypt.org/certificates/

from zfp.

I fixed the problem. The certificates I downloaded through the browser were incorrect. I instead wrote the output from openssl s_client -showcerts -connect git.cryptomilk.org:443/projects/cmocka.git to a file, and set the http.sslCAInfo in my global git config to point to that certificate file.

EDIT:
I'm on OSX 10.13.6 and git 2.18.0

Doing the above allowed me to clone the CMocka project, but then googletest would give its own SSL error during a zfp build. Downloading googletest's certificates and concatenating them with the above certificate did not work. I had to export all my keychain system roots certificates to file, and then paste the cmocka certificate at the end of the file, and point http.sslCAInfo to that file.
https://stackoverflow.com/a/9264603

from zfp.