[Pki-clean-room-devel] Problems with trying PKI-Clean-Room

[Daniel Pocock]

On 05/11/17 10:17, Dashamir Hoxha wrote:
> 
> 
> On Sun, Nov 5, 2017 at 10:05 AM, Daniel Pocock <daniel at pocock.pro
> <mailto:daniel at pocock.pro>> wrote:
> 
> 
>     > Cloning into 'make-pgp-clean-room'...
>     > fatal: unable to access
>     > 'https://anonscm.debian.org/git/collab-maint/make-pgp-clean-room.git/
>     <https://anonscm.debian.org/git/collab-maint/make-pgp-clean-room.git/>
>     > <https://anonscm.debian.org/git/collab-maint/make-pgp-clean-room.git/
>     <https://anonscm.debian.org/git/collab-maint/make-pgp-clean-room.git/>>':
>     > gnutls_handshake() failed: Error in the pull function.
>     >
>     > The funny part is that when I try to clone something from GitHub, it works.
> 
>     I wonder if that is a certificate problem.  You may need to manually
>     install the ca-certificates package and try again:
> 
>     $ sudo apt update
>     $ sudo apt install ca-certificates
> 
>     Please tell me if that fixes it.  If the git command doesn't tell you
>     there is a certificate error then I think it would be a good idea to
>     file a bug report against the git package, asking for a more verbose
>     error when certificate validation fails.
> 
>     If that doesn't fix it, you could try GIT_TRACE, here are some examples:
> 
> 
> Yes, I can always try to fix it myself.
> But it is striking that the default (out-of-the-box) git installation on
> the latest stable version
> of Debian, cannot communicate with the debian git server.
> On the other hand it does work well with GitHub.
> So, maybe the problem is with the debian git server.


When you say it is working with Github, were you using a Github HTTPS
URL or another type of Github URL?

Could you tell me if ca-certificates was already on your system?  Not
everybody trusts the CAs and some people don't like to have that package
on their system.

Regards,

Daniel