ZScaler – My Shitty Code https://myshittycode.com Embracing the Messiness in Search of Epic Solutions Mon, 20 May 2024 14:01:22 +0000 en-US hourly 1 https://wordpress.org/?v=6.9.1 https://myshittycode.com/wp-content/uploads/2022/04/cropped-icon-32x32.png ZScaler – My Shitty Code https://myshittycode.com 32 32 205304208 Git LFS: “Certificate Signed by Unknown Authority” Error https://myshittycode.com/2024/05/20/git-lfs-certificate-signed-by-unknown-authority-error/ https://myshittycode.com/2024/05/20/git-lfs-certificate-signed-by-unknown-authority-error/#respond Mon, 20 May 2024 14:01:16 +0000 https://myshittycode.com/?p=2593 Problem Your organization enforces zero-trust network access (ex: Zscaler or equivalent). Based on the ZScaler’s documentation, you made a copy of the Zscaler certificate and added it to Git. The Git’s core commands work successfully. However, when using Git LFS to manage large binary files, it failed with the following errors. Solution Instead of explicitly […]

The post Git LFS: “Certificate Signed by Unknown Authority” Error appeared first on My Shitty Code.

]]>

Table of Contents

Problem

Your organization enforces zero-trust network access (ex: Zscaler or equivalent).

Based on the ZScaler’s documentation, you made a copy of the Zscaler certificate and added it to Git.

git config --global http.sslcainfo ~/ca_certs/zscaler.pem

The Git’s core commands work successfully. However, when using Git LFS to manage large binary files, it failed with the following errors.

$ git push
Uploading LFS objects:   0% (0/3), 0 B | 0 B/s, done.                                                                                
LFS: Put "https://github-cloud.s3.amazonaws.com/alambic/media/703534560/85/85/858586aa357aa9e8c78f64d76a5d6a866ff4f06160508ac5af50175b604b0c77?actor_id=6835135&key_id=0&repo_id=779032228": tls: failed to verify certificate: x509: certificate signed by unknown authority
LFS: Put "https://github-cloud.s3.amazonaws.com/alambic/media/703534560/5c/47/5c4796e25fcb54726bd605f825d3f53c0804164186ee989af5649164d5026a10?actor_id=6835135&key_id=0&repo_id=779032228": tls: failed to verify certificate: x509: certificate signed by unknown authority
LFS: Put "https://github-cloud.s3.amazonaws.com/alambic/media/703534560/9c/76/9c766b0bf3e91eed522df3c5e508ce33a6c781a4891c8395154149eb60b537e0?actor_id=6835135&key_id=0&repo_id=779032228": tls: failed to verify certificate: x509: certificate signed by unknown authority
error: failed to push some refs to 'github.com:xxxxxxx/my-repo.git'

Solution

Instead of explicitly pointing to a ZScaler certificate, configure Git to rely on the device’s global trust store, where your security team should have already added the ZScaler certificate.

git config --global http.sslBackend openssl
git config --global --unset http.sslcainfo

Now, Git LFS commands will work successfully.

$ git push
Uploading LFS objects: 100% (3/3), 194 MB | 26 MB/s, done.
Enumerating objects: 1292, done.
Counting objects: 100% (1292/1292), done.
Delta compression using up to 11 threads
Compressing objects: 100% (1280/1280), done.
Writing objects: 100% (1280/1280), 83.42 MiB | 6.93 MiB/s, done.
Total 1280 (delta 751), reused 0 (delta 0), pack-reused 0
remote: Resolving deltas: 100% (751/751), completed with 6 local objects.
To github.com:xxxxxxx/my-repo.git
4075ed3..ce4a0e7 main -> main
sh-3.2$ git status
On branch main
Your branch is up to date with 'origin/main'.

nothing to commit, working tree clean

The post Git LFS: “Certificate Signed by Unknown Authority” Error appeared first on My Shitty Code.

]]> https://myshittycode.com/2024/05/20/git-lfs-certificate-signed-by-unknown-authority-error/feed/ 0 2593