Comments (19)
Original comment by Sebastian Sdorra (Bitbucket: sdorra, GitHub: sdorra).
Have you an SSL-Listener in the server-config.xml configured? The ssl-port in the general config panel is only for a redirect to that port.
from scm-manager.
Original comment by Sebastian Sdorra (Bitbucket: sdorra, GitHub: sdorra).
When you try to access your scm-manager the ssl-filter redirects you to https://hostname:sslport/scm and if no listener is configured to hostname:sslport then you get this issue. Have a look at <<issue 9>>.
from scm-manager.
Original comment by Sebastian Sdorra (Bitbucket: sdorra, GitHub: sdorra).
To disable the https redirect do the following steps:
Edit the config.xml in your scm home. Search the line
true
and replace it with:
false
Restart the scm-server.
from scm-manager.
Original comment by Anonymous.
okay, looks like this is not so easy to handle because there is no listener configured from my site.
I have no idea how to do this.......
from scm-manager.
Original comment by Sebastian Sdorra (Bitbucket: sdorra, GitHub: sdorra).
I will add a wiki page tomorrow.
from scm-manager.
Original comment by Anonymous.
That sounds GREAT!
Thanks
from scm-manager.
Original comment by Anonymous.
Just a quick question - Any update here today?
THANKS A LOT!
from scm-manager.
Original comment by Sebastian Sdorra (Bitbucket: sdorra, GitHub: sdorra).
Here is a first version of the wiki page. https://bitbucket.org/sdorra/scm-manager/wiki/scm-server-ssl
from scm-manager.
Original comment by Anonymous.
okay - thanks!
Just one problem.....I'm running a windows server :-(
from scm-manager.
Original comment by Sebastian Sdorra (Bitbucket: sdorra, GitHub: sdorra).
That is not a problem. Start the cmd.exe and run the keytool.exe. If the keytool.exe is not in your path then you must use the complete path. For example:
#!bash
c:\Progamm Files\java\jdk1.6.x\bin\keytool.exe -genkey -alias scm -keyalg RSA -keystore keystore.jks
from scm-manager.
Original comment by Anonymous.
okay - scm manager is using ssl now.
When I try to clone the repository now
git clone https://host.com:8181/git
I receive an error
error: error setting certificate verify locations:
CAfile: /bin/curl-ca-bundle.crt
CApath: none
What does this need?
from scm-manager.
Original comment by Anonymous.
$ git clone https://[email protected]:8181/scm/git/test test_ssl2
Initialized empty Git repository in C:/Users/scmadmin/test_ssl2/.git/
Password:
error: error setting certificate verify locations:
CAfile: /bin/curl-ca-bundle.crt
CApath: none
while accessing https://[email protected]:8181/scm/git/test/info/refs
fatal: HTTP request failed
from scm-manager.
Original comment by Sebastian Sdorra (Bitbucket: sdorra, GitHub: sdorra).
Git does not know the certifacte. A quick and dirty workaround is to disable the certificate check:
#!bash
git config http.sslVerify false
from scm-manager.
Original comment by Sebastian Sdorra (Bitbucket: sdorra, GitHub: sdorra).
For the nice way you have to export the certificate from keystore:
#!bash
keytool -exportcert -keystore keystore.jks -alias scm -rfc -file cert.pem
And set the absolute path to cert.pem as sslCAInfo path:
#!bash
git config http.sslCAInfo c:\scm-server\conf\cert.pem
from scm-manager.
Original comment by scm_manager_tester (Bitbucket: scm_manager_tester, ).
Second option sound useful - will give it a try but not before Thursday. - SORRY
from scm-manager.
Original comment by Sebastian Sdorra (Bitbucket: sdorra, GitHub: sdorra).
Wiki page updated:
https://bitbucket.org/sdorra/scm-manager/wiki/scm-server-ssl
from scm-manager.
Original comment by Sebastian Sdorra (Bitbucket: sdorra, GitHub: sdorra).
I think this issue is solved. The clone problem is a git problem. If you have questions to the git configuration send me a bitbucket notification.
from scm-manager.
Original comment by Luís Bastiao Silva (Bitbucket: [Luis Bastiao](https://bitbucket.org/Luis Bastiao), ).
Sorry for re-open this topic. But why this is a git issue? The https works in github. Can you clarify it to me?
from scm-manager.
Original comment by Sebastian Sdorra (Bitbucket: sdorra, GitHub: sdorra).
It is not really a git issue. It is the normal behavior of a ssl connection. If the client could not verify the certificate, it abort the connection (same behavior you could watch with a browser and a self signed certificate). Https works for github, because they have signed their certificate by a authority like verisign. You could also use a signed certificate with scm-manager, than you don't have to configure "http.sslVerify" or "http.sslCAInfo". For more information's on ssl connections http://en.wikipedia.org/wiki/Secure_Sockets_Layer. Next time please write to the mailing list https://groups.google.com/group/scmmanager for questions.
from scm-manager.
Related Issues (20)
- Blank page instead of startup screen HOT 28
- Default branch not set when you create a new GIT repository and don't initialize it during creation HOT 3
- the pack file might be corrupt. Caught 1 consecutive errors while trying to read this pack. HOT 5
- Provide ability to set repository path & use human-readable names for repository folder name HOT 5
- Subversion seems broken constant errors in logs HOT 3
- Enhance URL Redirection for User-friendly Access to SVN Files HOT 4
- Provide details for enabling dataFileCache HOT 1
- Increasing number of projects shown on Repositories page HOT 2
- IllegalArgumentException: event handler not found HOT 2
- Port the scm-hgnested-plugin to 2.x
- When a user is deleted, it is not deleted from the groups it was a member of HOT 2
- SVN dump buggy in docker container of SCM-Manager HOT 1
- Change number display changeset HOT 4
- SCM-Manager hosting using https proxy broken after 3.0.0 upgrade HOT 5
- 'create repository'-permission on namespace level HOT 1
- debian upgrade to 3.0 hangs daemon due to privilege issue HOT 3
- Latest Tag goes from 3.0.3 to 2.46.2 and docker hub scmmanager/scm-manager:latest has followed HOT 2
- Docker compose environment definition for forwardHeadersEnabled HOT 7
- I have found a issue in SCM-Manager Plugin error please help me to resolve the issue HOT 7
- Mirror Tags are always gray HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from scm-manager.