git-credential-manager icon indicating copy to clipboard operation
git-credential-manager copied to clipboard

Error when TLS 1.3 enabled in Cloudflare

Open JVimes opened this issue 1 year ago • 0 comments

Version

2.4.1.0

Operating system

Windows

OS version or distribution

Version 22H2 (OS Build 19045.3803)

Git hosting provider(s)

Other - please describe below

Other hosting provider

Gitea (self hosted)

(Azure DevOps only) What format is your remote URL?

None

Can you access the remote repository directly in the browser?

Yes, I can access the repository

Expected behavior

No error and browser auth works with TLS 1.3 enabled in Cloudflare

Actual behavior

With TLS 1.3 enabled in Cloudflare:

  • Browser reports success but error in console and legacy prompt.
PS> git clone https://gitea.mydomain.com/MyUsername/TestRepo.git
Cloning into 'TestRepo'...
warning: failed to probe 'https://gitea.mydomain.com/' to detect provider
warning: An error occurred while sending the request.
warning: see https://aka.ms/gcm/autodetect for more information.
# >>> Chrome page opens: "Authentication successful You can now close this page."
fatal: An error occurred while sending the request.
fatal: The request was aborted: Could not create SSL/TLS secure channel.
Username for 'https://gitea.mydomain.com':

It works with TLS 1.3 disabled in Cloudflare:

PS> git clone https://gitea.mydomain.com/MyUsername/TestRepo.git
Cloning into 'TestRepo'...
# >>> Chrome page opens: "Authentication successful You can now close this page."
remote: Enumerating objects: 3, done.
remote: Counting objects: 100% (3/3), done.
remote: Total 3 (delta 0), reused 0 (delta 0), pack-reused 0
Receiving objects: 100% (3/3), done.
PS>

Logs

JVimes avatar Dec 17 '23 23:12 JVimes