Re: git certificate error

February 24, 2022 9:29 PM, "Michael Hughes" <[email protected]> wrote:

> On Thu, 24 Feb 2022 16:55:20 +0000
> Colin Leroy-Mira via Users <[email protected]> wrote:
> 
>> Hi,
>> 
>> I just tried to do a "git pull --all" and got the following error:
>> 
>> fatal: unable to access
>> 'https://git.claws-mail.org/readonly/claws.git/': SSL certificate
>> problem: certificate has expired
>> 
>> If you didn't pull since a while, this could be due to Let's Encrypt
>> expiration of their previous root certificate, DST Root CA X3. Search
>> for "<your_distribution> remove DST Root CA X3" or something like
>> that.
>> 
>> HTH,
>> --
>> Colin
>> _______________________________________________
>> Users mailing list
>> [email protected]
>> https://lists.claws-mail.org/cgi-bin/mailman/listinfo/users
> 
> Thanks Colin, that did the trick.
> 
> Would be nice if it would have said which certificate had expired.


I think openssl s_client -connect git.claws-mail.org:443 would have helped, but indeed, certificate chain problems are often tiring to debug. 

Colin