Thanks Juerg,

can you figure out what could be problem on my machine. Please check following

$ GIT_CURL_VERBOSE=1 git clone https://git.centos.org/git/rpms/kernel.git Cloning into 'kernel'... * Couldn't find host git.centos.org in the .netrc file; using defaults * Hostname was NOT found in DNS cache * Trying 172.28.84.6... * Connected to 172.28.84.6 (172.28.84.6) port 3128 (#0) * Establish HTTP proxy tunnel to git.centos.org:443

CONNECT git.centos.org:443 HTTP/1.1

Host: git.centos.org:443 User-Agent: git/2.1.0 Proxy-Connection: Keep-Alive Pragma: no-cache

< HTTP/1.1 200 Connection Established < Date: Fri, 20 Mar 2015 09:06:03 GMT < Proxy-Connection: Keep-Alive < Via: 1.1 triton-wcg.toshiba-tsip.com < * Proxy replied OK to CONNECT request * found 173 certificates in /etc/ssl/certs/ca-certificates.crt * gnutls_handshake() warning: The server name sent was not recognized * failed to get server cert * Closing connection 0 fatal: unable to access 'https://git.centos.org/git/rpms/kernel.git/': gnutls_handshake() warning: The server name sent was not recognized

-Dipak

On Fri, Mar 20, 2015 at 1:09 PM, Juerg Haefliger juergh@gmail.com wrote:

On Fri, Mar 20, 2015 at 8:04 AM, Dipak Dudhabhate dipak.dudhabhate@gmail.com wrote:

...

Hi,

I am trying to download rhel7 kernel code using git as follows.

$ git clone https://git.centos.org/git/rpms/kernel.git Cloning into 'kernel'... fatal: unable to access 'https://git.centos.org/git/rpms/kernel.git/': gnutls_handshake() warning: The server name sent was not recognized

I think this is a misconfiguration on git.centos.org. Something to do with the DNS cache not up to date or something.

$ GIT_CURL_VERBOSE=1 git clone https://git.centos.org/git/rpms/kernel.git Cloning into 'kernel'...

• Couldn't find host git.centos.org in the .netrc file; using defaults
• Hostname was NOT found in DNS cache
• Trying 85.13.226.35...
• Connected to git.centos.org (85.13.226.35) port 443 (#0)
• found 178 certificates in /etc/ssl/certs/ca-certificates.crt
• gnutls_handshake() warning: The server name sent was not recognized
• failed to get server cert
• Closing connection 0

fatal: unable to access 'https://git.centos.org/git/rpms/kernel.git/': gnutls_handshake() warning: The server name sent was not recognized

...Juerg

...

$ git clone git://git.centos.org/git/rpms/kernel.git Cloning into 'kernel'... fatal: Could not read from remote repository.

Please make sure you have the correct access rights and the repository exists.

Do i need git account to access it ? if yes where can do it?

-Dipak

---

CentOS-devel mailing list CentOS-devel@centos.org http://lists.centos.org/mailman/listinfo/centos-devel

-- Juerg Haefliger Hewlett-Packard _______________________________________________ CentOS-devel mailing list CentOS-devel@centos.org http://lists.centos.org/mailman/listinfo/centos-devel

Yes. I am behind the proxy server. I have already asked to admin. They are checking on it. Thanks for your help

-Dipak

On Fri, Mar 20, 2015 at 2:47 PM, Trevor Hemsley <trevor.hemsley@ntlworld.com

wrote:

Your DNS is broken and returning the wrong IP address for git.centos.org. That's an RFC1918 address. Are you behind a firewall/proxy server? How you get out from behind that is something you'll have to ask your network admins.

On 20/03/15 09:11, Dipak Dudhabhate wrote:

Thanks Juerg,

can you figure out what could be problem on my machine. Please check following

$ GIT_CURL_VERBOSE=1 git clone https://git.centos.org/git/rpms/kernel.git Cloning into 'kernel'...

• Couldn't find host git.centos.org in the .netrc file; using defaults
• Hostname was NOT found in DNS cache
• Trying 172.28.84.6...
• Connected to 172.28.84.6 (172.28.84.6) port 3128 (#0)
• Establish HTTP proxy tunnel to git.centos.org:443

...

CONNECT git.centos.org:443 HTTP/1.1

Host: git.centos.org:443 User-Agent: git/2.1.0 Proxy-Connection: Keep-Alive Pragma: no-cache

< HTTP/1.1 200 Connection Established < Date: Fri, 20 Mar 2015 09:06:03 GMT < Proxy-Connection: Keep-Alive < Via: 1.1 triton-wcg.toshiba-tsip.com <

• Proxy replied OK to CONNECT request
• found 173 certificates in /etc/ssl/certs/ca-certificates.crt
• gnutls_handshake() warning: The server name sent was not recognized
• failed to get server cert
• Closing connection 0

fatal: unable to access 'https://git.centos.org/git/rpms/kernel.git/': gnutls_handshake() warning: The server name sent was not recognized

-Dipak

On Fri, Mar 20, 2015 at 1:09 PM, Juerg Haefliger juergh@gmail.com wrote:

...

On Fri, Mar 20, 2015 at 8:04 AM, Dipak Dudhabhate dipak.dudhabhate@gmail.com wrote:

...

Hi,

I am trying to download rhel7 kernel code using git as follows.

$ git clone https://git.centos.org/git/rpms/kernel.git Cloning into 'kernel'... fatal: unable to access 'https://git.centos.org/git/rpms/kernel.git/': gnutls_handshake() warning: The server name sent was not recognized

I think this is a misconfiguration on git.centos.org. Something to do with the DNS cache not up to date or something.

$ GIT_CURL_VERBOSE=1 git clone https://git.centos.org/git/rpms/kernel.git Cloning into 'kernel'...

• Couldn't find host git.centos.org in the .netrc file; using defaults
• Hostname was NOT found in DNS cache
• Trying 85.13.226.35...
• Connected to git.centos.org (85.13.226.35) port 443 (#0)
• found 178 certificates in /etc/ssl/certs/ca-certificates.crt
• gnutls_handshake() warning: The server name sent was not recognized
• failed to get server cert
• Closing connection 0

fatal: unable to access 'https://git.centos.org/git/rpms/kernel.git/': gnutls_handshake() warning: The server name sent was not recognized

...Juerg

...

$ git clone git://git.centos.org/git/rpms/kernel.git Cloning into 'kernel'... fatal: Could not read from remote repository.

Please make sure you have the correct access rights and the repository exists.

Do i need git account to access it ? if yes where can do it?

-Dipak

---

CentOS-devel mailing list CentOS-devel@centos.org http://lists.centos.org/mailman/listinfo/centos-devel

-- Juerg Haefliger Hewlett-Packard _______________________________________________ CentOS-devel mailing list CentOS-devel@centos.org http://lists.centos.org/mailman/listinfo/centos-devel

---

CentOS-devel mailing listCentOS-devel@centos.orghttp://lists.centos.org/mailman/listinfo/centos-devel

---

CentOS-devel mailing list CentOS-devel@centos.org http://lists.centos.org/mailman/listinfo/centos-devel

On 03/20/2015 11:46 AM, Juerg Haefliger wrote:

On Fri, Mar 20, 2015 at 10:17 AM, Trevor Hemsley trevor.hemsley@ntlworld.com wrote:

...

...

Your DNS is broken and returning the wrong IP address for git.centos.org. That's an RFC1918 address. Are you behind a firewall/proxy server? How you get out from behind that is something you'll have to ask your network admins.

I'm not behind a firewall/proxy and I seem to have the same issue.

• Couldn't find host git.centos.org in the .netrc file; using defaults
• Hostname was NOT found in DNS cache
• Trying 85.13.226.35...
• Connected to git.centos.org (85.13.226.35) port 443 (#0)
• found 178 certificates in /etc/ssl/certs/ca-certificates.crt
• gnutls_handshake() warning: The server name sent was not recognized

Isn't this a problem on the server side?

...Juerg

The server is fine. Just tested using the command you used and I got (anonymous access, absolutely nothing different from defaults) :

Cloning into 'kernel'... * Couldn't find host git.centos.org in the .netrc file; using defaults * About to connect() to git.centos.org port 443 (#0) * Trying 85.13.226.35... * Connected to git.centos.org (85.13.226.35) port 443 (#0) * Initializing NSS with certpath: sql:/etc/pki/nssdb * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none * SSL connection using TLS_DHE_RSA_WITH_AES_128_CBC_SHA * Server certificate: * subject: CN=git.centos.org,O=Red Hat Inc.,L=Raleigh,ST=North Carolina,C=US * start date: Dec 05 00:00:00 2014 GMT * expire date: Dec 13 12:00:00 2017 GMT * common name: git.centos.org * issuer: CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US

GET /git/rpms/kernel.git/info/refs?service=git-upload-pack HTTP/1.1

User-Agent: git/2.2.1 Host: git.centos.org Accept: */* Accept-Encoding: gzip Pragma: no-cache

< HTTP/1.1 200 OK < Date: Fri, 20 Mar 2015 09:50:25 GMT < Server: Jetty(7.6.8.v20121106) < Expires: Tue, 01 Jan 1980 00:00:00 GMT < Pragma: no-cache < Cache-Control: no-cache, max-age=0, must-revalidate < Content-Type: application/x-git-upload-pack-advertisement < Content-Encoding: gzip < Content-Length: 830 < Connection: close < * Expire cleared * Closing connection #0 * Couldn't find host git.centos.org in the .netrc file; using defaults * About to connect() to git.centos.org port 443 (#0) * Trying 85.13.226.35... * Connected to git.centos.org (85.13.226.35) port 443 (#0) * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none * SSL connection using TLS_DHE_RSA_WITH_AES_128_CBC_SHA * Server certificate: * subject: CN=git.centos.org,O=Red Hat Inc.,L=Raleigh,ST=North Carolina,C=US * start date: Dec 05 00:00:00 2014 GMT * expire date: Dec 13 12:00:00 2017 GMT * common name: git.centos.org * issuer: CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US

POST /git/rpms/kernel.git/git-upload-pack HTTP/1.1

User-Agent: git/2.2.1 Host: git.centos.org Accept-Encoding: gzip Content-Type: application/x-git-upload-pack-request Accept: application/x-git-upload-pack-result Content-Length: 924

< HTTP/1.1 200 OK < Date: Fri, 20 Mar 2015 09:50:26 GMT < Server: Jetty(7.6.8.v20121106) < Expires: Tue, 01 Jan 1980 00:00:00 GMT < Pragma: no-cache < Cache-Control: no-cache, max-age=0, must-revalidate < Content-Type: application/x-git-upload-pack-result < Connection: close < Transfer-Encoding: chunked < remote: Counting objects: 377, done remote: Finding sources: 100% (377/377) remote: Getting sizes: 100% (254/254) remote: Compressing objects: 99% (12412/12416) remote: Total 377 (delta 92), reused 170 (delta 62) * Expire cleared * Closing connection #0 Receiving objects: 100% (377/377), 1.42 MiB | 0 bytes/s, done. Resolving deltas: 100% (173/173), done. Checking connectivity... done.

wolfy

On Fri, Mar 20, 2015 at 11:25 AM, Karanbir Singh mail-lists@karan.org wrote:

On 03/20/2015 09:46 AM, Juerg Haefliger wrote:

...

...

...

$ GIT_CURL_VERBOSE=1 git clone https://git.centos.org/git/rpms/kernel.git Cloning into 'kernel'...

• Couldn't find host git.centos.org in the .netrc file; using defaults
• Hostname was NOT found in DNS cache
• Trying 85.13.226.35...
• Connected to git.centos.org (85.13.226.35) port 443 (#0)
• found 178 certificates in /etc/ssl/certs/ca-certificates.crt
• gnutls_handshake() warning: The server name sent was not recognized
• failed to get server cert
• Closing connection 0

fatal: unable to access 'https://git.centos.org/git/rpms/kernel.git/': gnutls_handshake() warning: The server name sent was not recognized

what ver of curl are you using ?

7.38.0

-- Karanbir Singh +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh GnuPG Key : http://www.karan.org/publickey.asc _______________________________________________ CentOS-devel mailing list CentOS-devel@centos.org http://lists.centos.org/mailman/listinfo/centos-devel

On 03/20/2015 09:17 AM, Trevor Hemsley wrote:

Your DNS is broken and returning the wrong IP address for git.centos.org. That's an RFC1918 address. Are you behind a firewall/proxy server? How you get out from behind that is something you'll have to ask your network admins.

concerning that someone is trying to MITM git.centos.org, what setup is this anyway ?

- KB