{"action":"created","issue":{"url":"https://api.github.com/repos/gogits/gogs/issues/1849","labels_url":"https://api.github.com/repos/gogits/gogs/issues/1849/labels{/name}","comments_url":"https://api.github.com/repos/gogits/gogs/issues/1849/comments","events_url":"https://api.github.com/repos/gogits/gogs/issues/1849/events","html_url":"https://github.com/gogits/gogs/issues/1849","id":113794337,"number":1849,"title":"weird thing when trying to clone (TLS / Cert)","user":{"login":"arckosfr","id":7550492,"avatar_url":"https://avatars.githubusercontent.com/u/7550492?v=3","gravatar_id":"","url":"https://api.github.com/users/arckosfr","html_url":"https://github.com/arckosfr","followers_url":"https://api.github.com/users/arckosfr/followers","following_url":"https://api.github.com/users/arckosfr/following{/other_user}","gists_url":"https://api.github.com/users/arckosfr/gists{/gist_id}","starred_url":"https://api.github.com/users/arckosfr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/arckosfr/subscriptions","organizations_url":"https://api.github.com/users/arckosfr/orgs","repos_url":"https://api.github.com/users/arckosfr/repos","events_url":"https://api.github.com/users/arckosfr/events{/privacy}","received_events_url":"https://api.github.com/users/arckosfr/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-10-28T11:07:06Z","updated_at":"2015-10-28T11:53:42Z","closed_at":null,"body":"Hello all,\r\n\r\ni've looked trough other issue, but i don't find someone who had the same problem than me.\r\nMy situation\r\n\r\nI have an Hypervisor\r\nSo i have my Nginx Front-End on first VM (192.168.1.100), and my docker-host (192.168.1.105)is on second VM, on the docker-host i have start a docker with -p 100080:3000, there is the app.ini : \r\n```\r\n[server]\r\nDOMAIN = gogs.domain.xyz\r\nHTTP_PORT = 3000\r\nROOT_URL = https://gogs.domain.xyz/\r\nDISABLE_SSH = true\r\nSSH_PORT = 22\r\nOFFLINE_MODE = false\r\n```\r\nand i have a reverse proxy on my Nginx : \r\n\r\n```\r\nserver {\r\n\r\n  listen 80;\r\n  server_name gogs.domain.xyz;\r\n  #return 301 https://$server_name$request_uri;\r\n        access_log /var/log/nginx/gogs.log combined;\r\n        error_log /var/log/nginx/gogs-error.log error;\r\n\r\n     location / {\r\n        proxy_set_header X-Real-IP $remote_addr;\r\n        proxy_set_header X-Forwarded-For $remote_addr;\r\n        proxy_set_header Host $host;\r\n        proxy_redirect off;\r\n        proxy_pass http://192.168.1.105:10080;\r\n    }\r\n\r\n    }\r\n\r\n\r\n\r\nserver {\r\n\r\n  listen          443 http2 ssl;\r\n  server_name     gogs.domain.xyz;\r\n  include conf.d/ssl.gogs.conf;\r\n\r\n        access_log /var/log/nginx/gogs.log combined;\r\n        error_log /var/log/nginx/gogs-error.log error;\r\n\r\n     location / {\r\n        proxy_set_header X-Real-IP $remote_addr;\r\n        proxy_set_header X-Forwarded-For $remote_addr;\r\n        proxy_set_header Host $host;\r\n        proxy_redirect off;\r\n        proxy_pass http://192.168.1.105:10080;\r\n    }\r\n}\r\n```\r\nand my ssl configuration : \r\n```\r\n\r\n        ssl on;\r\n        ssl_certificate /etc/nginx/keys/gogs.***.crt-unified;\r\n        ssl_certificate_key /etc/nginx/ssl/server.key;\r\n        add_header Strict-Transport-Security max-age=31536000;\r\n        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;\r\n        ssl_ciphers \"EECDH+AESGCM:AES128+EECDH:AES256+EECDH\";\r\n\r\nssl_prefer_server_ciphers on;\r\nssl_ecdh_curve secp384r1;\r\n\r\nssl_session_cache   shared:SSL:10m;\r\nssl_session_timeout 10m;\r\n\r\nssl_stapling        on;\r\nssl_stapling_verify on;\r\n\r\nresolver 8.8.4.4 8.8.8.8 valid=300s;\r\nresolver_timeout 10s;\r\n\r\nadd_header X-Frame-Options \"DENY\";\r\nadd_header X-Content-Type-Options \"nosniff\";\r\n```\r\n\r\ni have activated server 80 for testing, originaly there is a redirection for HTTPS\r\n\r\nthe web view is ok, with secure https ( its a startssl certs )\r\nwhen i git clone in http no problem\r\nbut when i git clone in https : \r\n```bash\r\nroot@serv:~# git clone https://gogs.domain.xyz/user/docker-up1.git\r\nCloning into 'docker-up1'...\r\nerror: gnutls_handshake() failed: A TLS fatal alert has been received. while accessing https://gogs.doamin.xyz/user/docker-up1.git/info/refs\r\nfatal: HTTP request failed\r\n```\r\n\r\nand i don't understand why, i have tested with HTTPS and same certs on docker directly and its the same.\r\n\r\nif you have any idea.\r\n\r\nthanks for your great job !"},"comment":{"url":"https://api.github.com/repos/gogits/gogs/issues/comments/151819061","html_url":"https://github.com/gogits/gogs/issues/1849#issuecomment-151819061","issue_url":"https://api.github.com/repos/gogits/gogs/issues/1849","id":151819061,"user":{"login":"arckosfr","id":7550492,"avatar_url":"https://avatars.githubusercontent.com/u/7550492?v=3","gravatar_id":"","url":"https://api.github.com/users/arckosfr","html_url":"https://github.com/arckosfr","followers_url":"https://api.github.com/users/arckosfr/followers","following_url":"https://api.github.com/users/arckosfr/following{/other_user}","gists_url":"https://api.github.com/users/arckosfr/gists{/gist_id}","starred_url":"https://api.github.com/users/arckosfr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/arckosfr/subscriptions","organizations_url":"https://api.github.com/users/arckosfr/orgs","repos_url":"https://api.github.com/users/arckosfr/repos","events_url":"https://api.github.com/users/arckosfr/events{/privacy}","received_events_url":"https://api.github.com/users/arckosfr/received_events","type":"User","site_admin":false},"created_at":"2015-10-28T11:53:42Z","updated_at":"2015-10-28T11:53:42Z","body":"i have set up with your config, web is ok secure https\r\nand when i git clone now i have : \r\n```bash\r\nroot@vpn:~# git clone http://gogs.domain.xyz/user/docker-up1.git\r\nCloning into 'docker-up1'...\r\nerror: server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none while accessing http://gogs.domain.xyz/user/docker-up1.git/info/refs\r\nfatal: HTTP request failed\r\n```"}}