开源中文网

您的位置: 首页 > Linux应用 > Git > 正文

GIT clone自建ssl gitlab的时候提示Peer’s Certificate issuer is not recognized方

来源: 网络整理  作者: 佚名

下面我们来看一篇关于GIT clone自建ssl gitlab的时候提示Peer’s Certificate issuer is not recognized方法,具体的步骤细节如下文详解。

[root@iZ620cgsubhZ /tmp]# git clone https://git.dwhd.org/lookback/docker-gitlab.git
正克隆到 'docker-gitlab'...
fatal: unable to access 'https://git.dwhd.org/lookback/docker-gitlab.git/': Peer's Certificate issuer is not recognized.

[root@iZ620cgsubhZ /tmp]# cd /etc/ssl/certs/
[root@iZ620cgsubhZ /etc/ssl/certs]# make SERIAL=5
This makefile allows you to create:
  o public/private key pairs
  o SSL certificate signing requests (CSRs)
  o self-signed SSL test certificates

To create a key pair, run "make SOMETHING.key".
To create a CSR, run "make SOMETHING.csr".
To create a test certificate, run "make SOMETHING.crt".
To create a key and a test certificate in one file, run "make SOMETHING.pem".

To create a key for use with Apache, run "make genkey".
To create a CSR for use with Apache, run "make certreq".
To create a test certificate for use with Apache, run "make testcert".

To create a test certificate with serial number other than zero, add SERIAL=num
You can also specify key length with KEYLEN=n and expiration in days with DAYS=n

Examples:
  make server.key
  make server.csr
  make server.crt
  make stunnel.pem
  make genkey
  make certreq
  make testcert
  make server.crt SERIAL=1
  make stunnel.pem SERIAL=2
  make testcert SERIAL=3
[root@iZ620cgsubhZ /etc/ssl/certs]# cd -
[root@iZ620cgsubhZ /tmp]# echo 'export GIT_SSL_NO_VERIFY=true' >> ~/.bashrc
[root@iZ620cgsubhZ /tmp]# . ~/.bashrc
[root@iZ620cgsubhZ /tmp]# env|grep GIT_SSL_NO_VERIFY
GIT_SSL_NO_VERIFY=true
[root@iZ620cgsubhZ /tmp]#

[root@iZ620cgsubhZ /tmp]# git clone https://git.dwhd.org/lookback/docker-gitlab.git
正克隆到 'docker-gitlab'...
remote: Counting objects: 53, done.
remote: Compressing objects: 100% (48/48), done.
remote: Total 53 (delta 7), reused 0 (delta 0)
展开对象中: 100% (53/53), 完成.
检查连接... 完成。
[root@iZ620cgsubhZ /tmp]#

++++++++++++++++++++++++
如果上面的办法还是不行,可以试试下面的
[root@DS-VM-Node200 ~]# openssl s_client -showcerts -connect git.dwhd.org:443 /dev/null | openssl x509 -outform PEM >git.dwhd.org.crt
[root@DS-VM-Node200 ~]# git config http."https://git.dwhd.org/".sslCAInfo < git.dwhd.org.crt[/bash]

Tags:时候 方法
关于开源中文网 - 联系我们 - 广告服务 - 网站地图 - 版权声明