Windows 上的 Git ssl 错误
当尝试在 Windows 上使用 ssl 克隆 git 存储库时，我不断收到以下错误：
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
ssl 证书层次结构受信任（颁发者证书已添加到受信任的根证书颁发机构），我可以浏览到托管站点（Gitorious 的私有实例） ）没有 ssl 错误。我尝试过在 Windows 7 和 Windows Server 2008 上进行克隆，但两次都失败了。
有人有什么想法吗？
I keep getting the following error when attempting to clone a git repository using ssl on windows:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
The ssl certificate hierarchy is trusted (the issuer certificate is added to Trusted Root Certificate Authorities) and I can browse to the hosting site (a private instance of Gitorious) without ssl errors. I've tried cloning on Windows 7 and on Windows Server 2008 and it's failed both times.
Anyone got any ideas?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（4）
Git 显然不接受 Windows 中保存的证书，您必须指定编辑证书文件的路径 .gitconfig
gitconfig location:
添加行（替换为文件的路径和 yourCertificate.ctr 以及您的证书名称）：
然后重试..
Git Apparently not take certificates saved in windows, you have to specify what editing the path to the certificate file .gitconfig
gitconfig location:
Add the line (replace with the path to file and yourCertificate.ctr with the name to your certificate):
and try again..
http.sslcainfo 的位置存储在“C:\ProgramData\Git\config”中。
卸载/重新安装 git 时它不会改变。
我最近不得不将其从 更改
为
另见问题：
在 Git 中为 Windows 自己的系统范围配置配置 http.sslcainfo #531
https://github.com/git-for-windows/git/issues/531
The location of http.sslcainfo is stored in "C:\ProgramData\Git\config".
It is not altered when uninstalling/reinstalling git.
I recently had to change it from
to
Also see issue:
Configure http.sslcainfo in Git for Windows' own system-wide config #531
https://github.com/git-for-windows/git/issues/531
确保添加到您的 Git 全局配置文件中：
您的 msysgit 实例需要知道在哪里查找 CA 证书才能验证它们。
在此 SO 答案 或“无法获取Http 在 git 上工作”。
Make sure to add to your Git global config file:
Your msysgit instance needs to know where to look for the CA certificates in order to validate them.
See more settings in this SO answer or in "Cannot get Http on git to work".
如果所有其他方法都失败，您可以将环境变量
GIT_SSL_NO_VERIFY设置为true。但是，希望可以通过其他方式解决该问题。 警告：这会使您面临安全风险，因为您不再相信您正在与您认为正在与之交谈的服务器进行交谈。If all else fails, you can set the environment variable
GIT_SSL_NO_VERIFYtotrue. However, it is hopefully possible to resolve the issue in another way. WARNING: This exposes you to SECURITY RISKS, as you can no longer trust that you're talking to the server you think you're talking to.