[MacPorts] #50469: Git clone fails - SSL certificate problem: Couldn't understand the server certificate format

[MacPorts]

#50469: Git clone fails - SSL certificate problem: Couldn't understand the server
certificate format
---------------------+--------------------------------
  Reporter:  nils@…  |      Owner:  macports-tickets@…
      Type:  defect  |     Status:  new
  Priority:  Normal  |  Milestone:
 Component:  base    |    Version:  2.3.4
Resolution:          |   Keywords:
      Port:          |
---------------------+--------------------------------

Comment (by nils@…):

 It seems the `git clone` operation doesn't use an `env` variable at all,
 the one on line 443 is only used for `git checkout`. I just added
 `GIT_CURL_VERBOSE=1` to the command on line 436 and that got me this
 output:

 {{{
 $ sudo port -d fetch ansible
 (...)
 --->  Fetching distfiles for ansible
 DEBUG: Executing org.macports.fetch (ansible)
 DEBUG: Executing: GIT_CURL_VERBOSE=1 /usr/bin/git clone -q
 https://github.com/ansible/ansible.git
 /opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_release_ports_sysutils_ansible/ansible/work/ansible-2.0.0.2-1
 2>&1
 * Couldn't find host github.com in the .netrc file; using defaults
 *   Trying 192.30.252.128...
 * Connected to github.com (192.30.252.128) port 443 (#0)
 * SSL certificate problem: Couldn't understand the server certificate
 format
 * Closing connection 0
 fatal: unable to access 'https://github.com/ansible/ansible.git/': SSL
 certificate problem: Couldn't understand the server certificate format
 Command failed: GIT_CURL_VERBOSE=1 /usr/bin/git clone -q
 https://github.com/ansible/ansible.git
 /opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_release_ports_sysutils_ansible/ansible/work/ansible-2.0.0.2-1
 2>&1
 Exit code: 128
 Error: org.macports.fetch for port ansible returned: Git clone failed
 DEBUG: Error code: NONE
 DEBUG: Backtrace: Git clone failed
     while executing
 "gitfetch"
     (procedure "portfetch::fetch_main" line 14)
     invoked from within
 "portfetch::fetch_main org.macports.fetch"
     ("eval" body line 1)
     invoked from within
 "eval $procedure $targetname"
 Warning: targets not executed for ansible: org.macports.fetch
 Please see the log file for port ansible for details:
 /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_ports_sysutils_ansible/ansible/main.log
 To report a bug, follow the instructions in the guide:
     http://guide.macports.org/#project.tickets
 Error: Processing of port ansible failed
 }}}

 The lines starting with the asterisks seem to be the result of setting
 `GIT_CURL_VERBOSE=1`. Sadly this output doesn't really tell me more than I
 already knew.

 For laughs I also tried adding `GIT_SSL_NO_VERIFY=1` and tried the fetch
 again, but I got the same error message. The problem really seems to be
 the certificate format and not the certificate verification failing.
 Still, when I execute `/usr/bin/git clone
 https://github.com/ansible/ansible.git` directly on the command line -
 with or without `sudo` - the operation succeeds without any error
 messages, so somehow the certificate format is only an issue when the `git
 clone` operation is running via `port`. I have no idea how this is
 possible. It doesn't sound like a problem with the github.com certificate
 itself.

-- 
Ticket URL: <https://trac.macports.org/ticket/50469#comment:17>
MacPorts <https://www.macports.org/>
Ports system for OS X