Github unable to access SSL connect error

Ask Question

up vote15down votefavorite

2

I have been using git lots for the last few months. git push worked 12 hours ago now all attempts generate errors, with verbose it produces this:

GIT_CURL_VERBOSE=1 git push
* Couldn't find host github.com in the .netrc file; using defaults
* About to connect() to github.com port 443 (#0)
* Trying 192.30.253.112... * Connected to github.com (192.30.253.112) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
   CApath: none
* NSS error -12190
* Expire cleared
* Closing connection #0
fatal: unable to access 'https://github.com/waveney/wmff/': SSL connect error

Any bright ideas? No changes to server from when it worked to now, restart made no difference

ssl github

shareimprove this question

asked Feb 22 at 22:38

Waveney

94117

• NSS -12190 is "Peer reports incompatible or unsupported protocol version." Prob dupe stackoverflow.com/questions/48938019/… and stackoverflow.com/questions/48938071/… both of which cite githubengineering.com/crypto-removal-notice which permanently disabled TLSv1.0 and 1.1 today at 19:00 UTC, about 3 hours before your post, and gives fixes for some clients. – dave_thompson_085 Feb 23 at 1:13 
• Yes that seems to be what happened - it is the oldest of my servers. – Waveney Feb 23 at 7:47

add a comment

2 Answers

activeoldestvotes

up vote62down voteaccepted

I was having the same problem on various CentOS 6 VM's and it turned out to be an issue with stale curl and nss libraries (thanks to this thread for pointing me in the right direction: cURL SSL connect error 35 with NSS error -5961).

The fix that worked for me is just:

yum update -y nss curl libcurl