Gitblit：连接到mydomain的未知SSL协议错误：443

我在EC2上托管一台gitblit服务器。我做了我自己的证书与Start SSL 和我能够：Gitblit：连接到mydomain的未知SSL协议错误：443

访问gitblit网站通过HTTPS（浏览器）从本地主机
克隆（服务器本身）

当我试图从终端使用Mac OS的git客户我得到

export $GIT_CURL_VERBOSE=1 
git clone https://[email protected]/git/testing123.git 
cloning into 'testing123'... 
* Couldn't find host mydomain.com in the .netrc file; using defaults 
* About to connect() to mydomain.com port 443 (#0) 
* Trying xxx.xxx.xxx.xxx... 
* Connected to mydomain.com (xxx.xxx.xxx.xxx) port 443 (#0) 
* Connected to mydomain.com (xxx.xxx.xxx.xxx) port 443 (#0) 
* successfully set certificate verify locations: 
* CAfile: /opt/local/share/curl/curl-ca-bundle.crt 
    CApath: none 
* Unknown SSL protocol error in connection to mydomain.com:443 
* Closing connection #0 
error: Unknown SSL protocol error in connection to mydomain.com:443 while accessing https://[email protected]/git/testing123.git/info/refs 
fatal: HTTP request failed

使用开放资源库，克隆到我的电脑SSL我

OpenSSL> s_client -tls1_2 -connect mydomain.com:443 
CONNECTED(00000003) 
140735107039708:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:s3_pkt.c:596: 
--- 
no peer certificate available 
--- 
No client certificate CA names sent 
--- 
SSL handshake has read 0 bytes and written 0 bytes 
--- 
New, (NONE), Cipher is (NONE) 
Secure Renegotiation IS NOT supported 
Compression: NONE 
Expansion: NONE 
SSL-Session: 
    Protocol : TLSv1.2 
    Cipher : 0000 
    Session-ID: 
    Session-ID-ctx: 
    Master-Key: 
    Key-Arg : None 
    PSK identity: None 
    PSK identity hint: None 
    SRP username: None 
    Start Time: 1372280840 
    Timeout : 7200 (sec) 
    Verify return code: 0 (ok) 
--- 
error in s_client

因为我必须创建自己的密钥库，因为我的服务器并不需要有X11，我存储

serverKeyStore.jks

私钥MYDOMAIN
mydomain class 1 primary intermediate cert
startcom CA
startcom类1个主intermadiate CA

serverTrustStore.jks

startcom CA
startcom类1主客户机CA
startcom类1主服务器CA

我不不知道这是否正确。如果我不得不把自己存储在商店做这项工作，相信我，我会的。我搜索得非常努力以至于几乎碰到了互联网的结尾（我们都知道这里有很多山羊x_X）。所以我不知道还有什么要做。

版本：

git 1.7.11.1 
OpenSSL 1.0.1e 11 Feb 2013 

curl 7.26.0 (x86_64-apple-darwin11.3.0) libcurl/7.26.0 OpenSSL/1.0.1e zlib/1.2.8 libidn/1.25 
Protocols: dict file ftp ftps gopher http https imap imaps pop3 pop3s rtsp smtp smtps telnet tftp 
Features: IDN IPv6 Largefile NTLM NTLM_WB SSL libz TLS-SRP

来源

2013-06-26 Pacu

尝试注释掉该行

#server.certificateAlias = localhost

或将其更改为类似下面

server.certificateAlias = "Your domain cert alias in key store"

来源

2013-10-04 04:12:19

Gitblit：连接到mydomain的未知SSL协议错误：443

回答

相关问题