support HTTPS servers with Mozilla's "Modern compatibility" TLS

[fkooman]

Servers configured with this [1] don't work, with [2] do work when importing repositories:

Error: Uncaught Exception: [RuntimeException] Failed to execute git clone --mirror 'https://git.tuxed.net/php-yubitwee.git' '/home/composer/.composer/cache/vcs/https---git.tuxed.net-php-yubitwee.git/' Cloning into bare repository '/home/composer/.composer/cache/vcs/https---git.tuxed.net-php-yubitwee.git'... fatal: unable to access 'https://git.tuxed.net/php-yubitwee.git/': gnutls_handshake() failed: Handshake failed

[1] https://wiki.mozilla.org/Security/Server_Side_TLS#Modern_compatibility
[2] https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29

[stof]

the error happens when running git clone, so this seems related to the TLS library used by git

[MrPetovan]

I got the same issue from Packagist.org trying to register a package from a Gitea install with a restrictive (TLS v1.2-only, SNI, HSTS) SSL certificate: https://git.friendi.ca/friendica/php-json-ld

It looks like the GNU TLS library could get an update.

Cloning the repository from my personal machine works fine.

[stof]

@Seldaek can you check the TLS library used by git on the packagist server ?

[noplanman]

Just run into this too, what's the status on this?
I'm trying to add https://git.feneas.org/noplanman/wp-otp

[Seldaek]

Thanks to this weekend's server maintenance/migration we now should have support for this.

[MrPetovan]

Thanks, it works now! https://packagist.org/packages/friendica/json-ld