SourceTree - cloning from HTTPS Git repo with sslVerify=false

[Shane Carr]

We are setting up Git repositories for students to use as part of a class at our institution. We need to bypass the SSL verification step in order for the repositories to be cloned. For example, cloning a repository works on the command line like this:

$ env GIT_SSL_NO_VERIFY=true git clone https://domain.edu/path/to/git
Cloning into 'git'...
Username for 'https://domain.edu': xxx
Password for 'https://xxx@domain.edu':

Alternatively, this also works:

$ git config --global http.sslVerify false
$ git clone https://domain.edu/path/to/git
Cloning into 'git'...
Username for 'https://domain.edu': xxx
Password for 'https://xxx@domain.edu':

However, when I use SourceTree to attempt to clone the repo, it gets stuck on the authentication part, even with the http.sslVerify in my .gitconfig and the "Disable SSL certificate verification" box checked in the preferences.

Any ideas?

[KieranA]

Hi Shane,

If you're working on the Mac there's an option on the Git tab in preferences that says "Disable SSL certificate validation" which you can disable. The same option may be on Windows, too (apologies, I'm the Mac dev and haven't got a Windows OS running handy at the moment)

Cheers

[Andranik Azizbekian]

Helped, thanks.

[KieranA]

Hi Shane,

I've filed an issue for you so it's worth following it from there. We'll still need to validly reproduce this issue but based on what you've said (https://jira.atlassian.com/browse/SRCTREE-1547). I'm creating my own apache server now to have a fake certificate so I can ignore and clone from a URL to clone from.

Cheers

[Shane Carr]

Mac OS X 10.7.5 and SourceTree 1.5.8.

[Shane Carr]

Hi Kieran,

Thanks for the response. As I mentioned in the OP, I have that box checked already.

SourceTree continues asking me for my username and password, even when they are correct.

~Shane

[KieranA]

Sorry missed that somehow. Is this on Windows or Mac?

[Shane Carr]

Mac OS X 10.7.5 and SourceTree 1.5.8.

[Shane Carr]

Strangely, I just tried in a Windows VM, and the repository cloned as expected when I checked the box in the preferences in Windows.

[KieranA]

Just as a sidenote, have you taken a look at your repository git config (rather than the global one) to see if http.sslVerify is set in there? If so, it would override the global config.

[KieranA]

Actually hold on a minute, you're trying to clone a repository so it should be taking your global config setting. I'll file this as a bug and ready to repro.