On Wed, 27 Nov 2013 21:57:56 -0800 (PST)
Shinpei Nakata <shinpei.nak...@gmail.com> wrote:

> Recently i've changed my git from 1.7.9.5 to 1.8.4.1. However, newer
> git faces problem with connecting some git repository. (for example,
> connect to github works fine, but some other repos, i cannot). And
> from GIT_CURL_VERBOSE log, the error below printed out.
> 
> Host: git.xxx.xxx.com:443
> User-Agent: git/1.8.4.1
> Proxy-Connection: Keep-Alive
> Pragma: no-cache
> 
> < HTTP/1.0 200 Connection Established
> < Proxy-agent: YYYYYY
> < 
> * Proxy replied OK to CONNECT request
> * successfully set certificate verify locations:
> *   CAfile: /etc/ssl/certs/ca-certificates.crt
>   CApath: /etc/ssl/certs
> * SSL re-using session ID
> * error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
> * Closing connection #0
> fatal: unable to access XXXXXXXX: error:1408F10B:SSL 
> routines:SSL3_GET_RECORD:wrong version number

I wild guess: libcurl used by your new version of Git has SSLv3
disabled, or your newer Git instructs libcurl to disable SSLv3 when
connecting, and the site you connect to has a very old (or
misconfigured) SSL/TLS library.

Try debugging the connection using

$ openssl s_client -debug -connect git.xxx.xxx.com:443

and then try adding flags from this set: -no_ssl2, -no_ssl3 and
-no_tls1 (consult the s_client(1) manual page for more details) to work
out which version of SSL/TLS has to be enabled for the connection to
succeed.

-- 
You received this message because you are subscribed to the Google Groups "Git 
for human beings" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to git-users+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to