Mobaxterm – setting up Git with CA certificate bundle

On my Windows machine, I use Mobaxterm, which is a great environment based on Cygwin and gives me an UNIX-like alternative to Windows command window.

Git can be set up but needs some configuration first before it’ll work flawlessly.

http://mobaxterm.mobatek.net/plugins.html  and get plugins for curl, openssl, git

Will likely see this error, when cloning a Git repo, and Git cannot find the CA certificate bundle required for secure access to Git.

git clone https://github.com/jaredevans/progtest

Cloning into 'progtest'...
 fatal: unable to access 'https://github.com/jaredevans/progtest/': 
SSL certificate problem, verify that the CA cert is OK. 
Details:
 error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate 
verify failed

To fix this, download & install the CA certificate bundle, then tell Git where to find it!

In Mobaxterm shell:

 mkdir -p /etc/pki/tls/certs
 curl http://curl.haxx.se/ca/cacert.pem -o /etc/pki/tls/ca-bundle.crt
 git config --system http.sslcainfo /etc/pki/tls/ca-bundle.crt
 git config -l

git clone https://github.com/jaredevans/progtest

Cloning into 'progtest'...
remote: Counting objects: 3, done.
remote: Total 3 (delta 0), reused 0 (delta 0), pack-reused 0
Unpacking objects: 100% (3/3), done.
Checking connectivity... done.

Note: commands with colorized output like:

git log

will output messed up escape characters (can’t correctly show the colors).  To fix this:

git config --global core.pager more
This entry was posted in Linux, Programming, Web/Tech. Bookmark the permalink.
  • Chris Gregory

    Thanks. This helped me. But when I pasted your gitconfig command it didn’t work till I went and added the path to the /certs/ folder

    git config –system http.sslcainfo /etc/pki/tls/certs/ca-bundle.crt