"SSL connection error" cloning from github (CentOS 6.5)

Issues related to configuring your network
Post Reply
mayaknife
Posts: 8
Joined: 2017/07/25 09:56:57

"SSL connection error" cloning from github (CentOS 6.5)

Post by mayaknife » 2021/02/18 10:03:22

I have to maintain some old software. To do this I've set up two VMware virtual machines, one running CentOS 6.5 and the other CentOS 7.5. When I try to clone a repository from github in the 6.5 VM I get the following error:

Code: Select all

fatal: unable to access 'https://github.com/myacct/myrepo.git/': SSL connect error
Doing the exact same command on the 7.5 VM works without any error.

The version of OpenSSL on the 6.5 VM is 1.0.1e-58. The version on the 7.5 VM is 1.0.2k. I tried building 1.0.2k locally on the 6.5 VM but 'make install' put everything into /usr/loca/ssll. I soft-linked /usr/local/ssl/bin/openssl to /usr/bin/openssl but I doubt that has any effect on the 'git' command as I presume it's accessing SSL through libraries, not the 'openssl' command. In any case it didn't fix the issue.

Any ideas as to what I can do to work around this problem?

sml
Posts: 305
Joined: 2020/01/17 09:01:44

Re: "SSL connection error" cloning from github (CentOS 6.5)

Post by sml » 2021/02/18 10:36:25

Try

Code: Select all

git clone git://github.com/myacct/myrepo.git

User avatar
TrevorH
Site Admin
Posts: 33191
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: "SSL connection error" cloning from github (CentOS 6.5)

Post by TrevorH » 2021/02/18 13:36:16

Start by upgrading to CentOS 6.10 which is the latest and last version of CentOS 6. Runnign an o/s from 2013 and trying to use security protocols that are current in 2021 does not work as you've discovered.

It's very possible that if your https website is configured to allow only TLS 1.3 then CentOS 6 will never be able to access it. TLS 1.2 is the highest that CentOS 6 will ever support.

And if you compile and install a local openssl then be prepared to reinstall your system as it will almost certainly break everything. Do not do it.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

mayaknife
Posts: 8
Joined: 2017/07/25 09:56:57

Re: "SSL connection error" cloning from github (CentOS 6.5)

Post by mayaknife » 2021/02/19 19:21:08

The solution was to upgrade the 'nss' package:

Code: Select all

sudo yum upgrade nss

Post Reply