While trying to clone a repository from Github the other day on one of my EC2 servers and I ran into an SSL verification issue. As it turns out, Github renewed their SSL certificate (as people who are responsible about their web presence do when their certificate is about to expire). As a result, I couldn’t git clone over https. This presents a problem since all my deploys work using git clone over https.
The error looks something like this:
1 2 3 4 | *** error: SSL certificate problem, verify that the CA cert is OK. Details: *** error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed while accessing https://github.com/indexzero/daemon.node.git/info/refs *** fatal: HTTP request failed *** Clone of 'https://github.com/indexzero/daemon.node.git' into submodule path 'support/daemon' failed |
The reason for the error is because CentOS (at least the RightScale version 5.6.8.1 has an old certificate authority bundle: /etc/pki/tls/certs/ca-bundle.crt.
I backed up the existing certificate file just to be on the safe side.
1 | # cp /etc/pki/tls/certs/ca-bundle.crt /root/backup/ |
To fix the issue, just download a new certificate bundle. I used the one from haxx.se.
1 | # curl http://curl.haxx.se/ca/cacert.pem -o /etc/pki/tls/certs/ca-bundle.crt |
