SourceTree and Stash: Unable to get local issuer certificate

git ssl-certificate bitbucket atlassian-sourcetree bitbucket-server
squid808 picture squid808 · Jul 21, 2014 · Viewed 41.7k times · Source

We have Atlassian Stash installed on a Windows 2008R2 server, and for the most part everything is working nicely. We have an SSL certificate issued by our local on-premise CA and a DNS entry set up so we can go to https://stash/ and it works quite nicely, except in Firefox where it throws a warning (related?).

When using Atlassian's Sourcetree we can navigate and choose a repository, but when we try to clone it we get the following error:

fatal: unable to access https://user@url/scm/etc/etc.git: SSL certificate problem: unable to get local issuer certificate

I get the same error if I try if from the git bash as well. Based on this error, I've tried following the instructions on adding the SSL certificate to the Git as also found on their website, including what is in the comments, to no avail. I have exported the cert through Firefox and through the MMC certificate snap-in, gotten the same results and put it in its own file, combined with the curl file, and no matter what keep getting this error. I have yet to try getting it to work with SSH keys yet since I was hoping to make this easier for my team.

I also tried using ssh myserver and accepting the connection, and I entered my password and restarted; still the same error.

I do not want to simply ignore certificate validation either, since that seems a bit pointless, then.

How can I get this working with our CA-issued cert?

Answer

Bohemian picture Bohemian · Aug 27, 2015

I just disabled SSL certificate checks (which is fine for internal repos):

Tools > Options > Git > Disable SSL certificate validation (ticked)

Related questions

SSL certificate rejected trying to access GitHub over HTTPS behind firewall

I'm stuck behind a firewall so have to use HTTPS to access my GitHub repository. I'm using cygwin 1.7.7 on Windows XP. I've tried setting the remote to https://[email protected]/username/ExcelANT.git, but pushing prompts for a password, …

Read More
Unable to resolve "unable to get local issuer certificate" using git on Windows with self-signed certificate

I am using Git on Windows. I installed the msysGit package. My test repository has a self signed certificate at the server. I can access and use the repository using HTTP without problems. Moving to HTTPS gives the error: SSL …

Read More
configure Git to accept a particular self-signed server certificate for a particular https remote

The sysadmin for a project I'm on has decided that SSH is "too much trouble"; instead, he has set up Git to be accessible via an https:// URL (and username/password authentication). The server for this URL presents a self-signed …

Read More