""error: error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version while accessing"

[vasim-farooqui]

Hi I am facing error while using git fetch

"error: error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version while accessing https://github.com/organisationname/reponame/info/refs?service=git-upload-pack
fatal: HTTP request failed.

After this error updated openssl version from 0.9 to 1.0.1e
Still getting same error.

[mspncp]

Hi, the versions 0.9 and 1.0.1 are outdated and not supported anymore. Please upgrade to version 1.0.2, see https://www.openssl.org/source.

[vasim-farooqui]

Hi I have upgrade the openssl version to OpenSSL 1.0.2a 19 Mar 2015 Still facing the same error. Regards, Vasim From: Matthias St. Pierre <notifications@github.com> Sent: 30 March 2018 17:23 To: openssl/openssl <openssl@noreply.github.com> Cc: Vasimullah Farooqui <vasimullah.farooqui@lrn.com>; Author <author@noreply.github.com> Subject: Re: [openssl/openssl] ""error: error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version while accessing" (#5806) Hi, the versions 0.9 and 1.0.1 are outdated and not supported anymore. Please upgrade to version 1.0.2, see https://www.openssl.org/source. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub<#5806 (comment)>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AjKc1-pLzaWyQMPAkmcdXfaSom6QnId2ks5tjhyrgaJpZM4TBmfN>.

[mattcaswell]

What platform are you on? How did you do the upgrade? i.e. did you download and build from source, or did you get OpenSSL from your OS vendor repository?

[vasim-farooqui]

CentOS release 5.7 (Final) x86_64 Yes Downloaded the package from below url and build from source.
https://www.openssl.org/source/openssl-1.0.2a.tar.gz

[mattcaswell]

Ok. I don't know why you chose 1.0.2a since that is not the most recent 1.0.2 release and has security issues. You should really use 1.0.2o (the most up to date version).

The most likely explanation is that you still have the system version of OpenSSL installed and your git is using that one. If your git command is linked against OpenSSL 0.9.x then you probably need a newer version of that too.

[vasim-farooqui]

How do i make git to use to new version of openssl installed.
Is there any way to config that for git

[kroeckx]

You really need to recompile it and make sure it uses the correct headers and links to the correct library

[vasim-farooqui]

Recompile git or openssl, is there any way where i can re-install git with higher version and keep the existing setting as it is.

[levitte]

This is really a question you should ask the git folks... their README might be helpful. As for rebuilding git, I suggest you have a look at their INSTALL, where you will find nothing about OpenSSL, but everything about libcurl, which is a HTTP transport library that uses, among others, OpenSSL:

- Git is reasonably self-sufficient, but does depend on a few external
  programs and libraries. ...
...
	- "libcurl" library is used by git-http-fetch, git-fetch, and, if
	  the curl version >= 7.34.0, for git-imap-send.  You might also
	  want the "curl" executable for debugging purposes. If you do not
	  use http:// or https:// repositories, and do not want to put
	  patches into an IMAP mailbox, you do not have to have them
	  (use NO_CURL).

So all in all, you will need to build newer versions of OpenSSL, libcurl and git, at the very least... and to build git, you will need to make sure that you have installed the development packages for everything else that you want git to use.

For further information specifically about git, I suggest that you talk with the git folks, as they are much better informed than any of us. The README I pointed at has the contact details.

[mspncp]

The normal way to update git would be to use the package manager of your Linux distribution (CentOS in your case) and not to build and install from source. IMHO, your real problem is that you are using a relative old and outdated CentOS release. CentOS 5.7 was released in September 2011 and is end-of-life since end of March 2017. So maybe an update of your CentOS would solve all your problems.

Hope that helps, Matthias

[richsalz]

And now I think this issue can be closed.

[vasim-farooqui]

@kroeckx Yes definitely i need to upgrade git .
Do you happened to know the way to do it in which it does not break the system.

[kjr247]

@vasim-farooqui
https://gitforwindows.org/
download here.

[JulienDesurmont]

Hello.
I've faced the same issue :

Use this command to pull / fetch : git remote add origin git@github.com:*****.git

instead of git remote add origin https://github.com/*********.git