Hi, 

i use git on windows 10, behind a SSL company proxy with self-signed 
certificate bypassed with cntlm with certificate added to custom 
curl-ca-bundle.crt file

starting with Git 2.5 when i do a 

git clone 'https://*XXXX*@bitbucket.org/XXXX/XXXX.git/'

i receive below error:

*fatal: unable to access 'https://x...@bitbucket.org/XXXX/XXXX.git/': 
error:14082174:SSL routines:ssl3_check_cert_and_algorithm:dh key too small*

probably this problem is related to poor quality of the self signed 
certificate but I can't change the certificate itself (is out of my control)

*Note that:*
* - *If you see XXXX is a redacted value for security/privacy but this is 
not relevant
 - I can't rebuild the self-signed certificate (is out of my control)
 - I've already try with git config https.sslVerify false (even with 
--global to be sure... )
 - with previous git version this problem not happen

below my own configuration:

git config --list

core.symlinks=false
core.autocrlf=true
color.diff=auto
color.status=auto
color.branch=auto
color.interactive=true
pack.packsizelimit=2g
help.format=html
http.sslcainfo=C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt
diff.astextplain.textconv=astextplain
rebase.autosquash=true
http.proxy=http://localhost:9999
http.sslcainfo=c:/Users/XXXX/curl-ca-bundle.crt
https.proxy=https://localhost:9999
https.sslcainfo=c:/Users/XXXX/curl-ca-bundle.crt


there is a way to fix this problem?

-- 
You received this message because you are subscribed to the Google Groups "Git 
for human beings" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to git-users+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to