X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:from:date:message-id:subject:to
	:content-type:content-transfer-encoding; q=dns; s=default; b=EgR
	EQB4d4de6opE5D7w4Cl63ZA42CG7IiEGKte36oLNCWnkjUiDWjnq3MX1qq9Oqe2V
	DJw14FS5VI6LFsfJhISbtBL9FY616ueqcz7gCsARF0KlcHfsHmVxGK9XFXjadKev
	aHQ4tDFR69B/uvRAmFaDdeykaYY09Aum4keH+JyI=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:from:date:message-id:subject:to
	:content-type:content-transfer-encoding; s=default; bh=/huy+sZnL
	b3JGlmEcGP0AyH7sq0=; b=oFkjxC26jpsXBgu6DbkaCFdbDg088tTOnIXwSxtyr
	9OTOB9mETUmrfQOC/+CvqEVnx8d/Z2SXdoM+cY87QsgdJkgfFiucHT3QIxghg1RX
	wmOzeCJ/mRRLVSgi4bi7OCo9ekiUQXjVY5cG8qJ0WWKFEi6lujVob0DzNHj6PZNB
	VA=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=2.6 required=5.0 tests=AWL,BAYES_50,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.2
X-HELO: mail-io0-f172.google.com
X-Received: by 10.107.8.212 with SMTP id h81mr23722867ioi.89.1442818499513; Sun, 20 Sep 2015 23:54:59 -0700 (PDT)
MIME-Version: 1.0
From: Lukasz Pielak <pielak AT gmail DOT com>
Date: Mon, 21 Sep 2015 08:54:39 +0200
Message-ID: <CAFkLm6xW=5uUP+CRrmUontqPzqAZ+r4WdwjVAhP+XTvs53JmFQ@mail.gmail.com>
Subject: Https proxy auth issue with git in cygwin 2.2.1
To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id t8L6tFkl004211

Hi

In the latest Cygwin 2.2.1. git doesn’t work with proxy authentication.
The git version is 2.5.1 and the curl version is 7.43.
The error prints fatal: unable to access
'https://github.com/mockito/mockito.git/': Unknown SSL protocol error
in connection to github.com:443

In my previous Cygwin 1.7.35 (with curl 7.41) this problem didn’t
exist. Git for windows (git 2.5.1 version, but curl is 7.44) seems to
work too.

I assume that  there is a bug in curl rather than in git.

Console output:

{ mockito } master » uname -a
~/gitrepo/demo/mockito 127
CYGWIN_NT-6.1-WOW K11263 2.2.1(0.289/5/3) 2015-08-20 11:40 i686 Cygwin
{ mockito } master »

{ mockito } master » curl --version
    ~/gitrepo/demo/mockito
curl 7.43.0 (i686-pc-cygwin) libcurl/7.43.0 OpenSSL/1.0.2d zlib/1.2.8
libidn/1.29 libssh2/1.5.0
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps
pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp
Features: Debug IDN IPv6 Largefile GSS-API Kerberos SPNEGO NTLM
NTLM_WB SSL libz TLS-SRP UnixSockets Metalink


{ mockito } master » GIT_TRACE=2 git pull


~/gitrepo/demo/mockito
12:22:48.164349 git.c:558               trace: exec: 'git-pull'
12:22:48.164349 run-command.c:347       trace: run_command: 'git-pull'
12:22:48.429558 git.c:348               trace: built-in: git
'rev-parse' '--parseopt' '--stuck-long' '--'
12:22:48.689167 git.c:348               trace: built-in: git
'rev-parse' '--git-dir'
12:22:48.860772 git.c:348               trace: built-in: git
'rev-parse' '--git-path' 'objects'
12:22:49.032378 git.c:348               trace: built-in: git
'rev-parse' '--is-bare-repository'
12:22:49.094780 git.c:348               trace: built-in: git
'rev-parse' '--show-toplevel'
12:22:49.188383 git.c:348               trace: built-in: git 'ls-files' '-u'
12:22:49.297586 git.c:348               trace: built-in: git
'symbolic-ref' '-q' 'HEAD'
12:22:49.469192 git.c:348               trace: built-in: git 'config'
'branch.master.rebase'
12:22:49.656398 git.c:348               trace: built-in: git 'config'
'pull.rebase'
12:22:49.843604 git.c:348               trace: built-in: git 'config' 'pull.ff'
12:22:49.921606 git.c:348               trace: built-in: git
'rev-parse' '-q' '--verify' 'HEAD'
12:22:50.015209 git.c:348               trace: built-in: git 'fetch'
'--update-head-ok'
12:22:50.171214 run-command.c:347       trace: run_command:
'git-remote-https' 'origin' 'https://github.com/mockito/mockito.git'
fatal: unable to access 'https://github.com/mockito/mockito.git/':
Unknown SSL protocol error in connection to github.com:443


{ mockito } master » GIT_CURL_VERBOSE=1 git pull


~/gitrepo/demo/mockito 1
* STATE: INIT => CONNECT handle 0x800834c8; line 1075 (connection #-5000)
* Couldn't find host github.com in the .netrc file; using defaults
* Added connection 0. The cache now contains 1 members
*   Trying 10.105.36.152...
* STATE: CONNECT => WAITCONNECT handle 0x800834c8; line 1128 (connection #0)
* Connected to webproxy.mycorp.com (10.105.36.152) port 8080 (#0)
* STATE: WAITCONNECT => WAITPROXYCONNECT handle 0x800834c8; line 1225
(connection #0)
* Establish HTTP proxy tunnel to github.com:443
> CONNECT github.com:443 HTTP/1.1
Host: github.com:443
User-Agent: git/2.5.1
Proxy-Connection: Keep-Alive

* Read response immediately from proxy CONNECT
< HTTP/1.1 407 Proxy Authentication Required
< Proxy-Authenticate: NEGOTIATE
< Proxy-Authenticate: NTLM
< Proxy-Authenticate: BASIC realm="BCAAA"
< Cache-Control: no-cache
< Pragma: no-cache
< Content-Type: text/html; charset=utf-8
< Proxy-Connection: close
< Connection: close
< Content-Length: 1551
<
* Ignore 1551 bytes of response-body
* Connect me again please
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* Unknown SSL protocol error in connection to github.com:443
* Curl_done
* Closing connection 0
* The cache now contains 0 members
* STATE: WAITPROXYCONNECT => CONNECT handle 0x800834c8; line 1208
(connection #-5000)
* Couldn't find host github.com in the .netrc file; using defaults
* Added connection 1. The cache now contains 1 members
* Hostname webproxy.mycorp.com was found in DNS cache
*   Trying 10.105.36.152...
* STATE: CONNECT => WAITCONNECT handle 0x800834c8; line 1128 (connection #1)
* Connected to webproxy.mycorp.com (10.105.36.152) port 8080 (#1)
* STATE: WAITCONNECT => WAITPROXYCONNECT handle 0x800834c8; line 1225
(connection #1)
* Establish HTTP proxy tunnel to github.com:443
> CONNECT github.com:443 HTTP/1.1
Host: github.com:443
User-Agent: git/2.5.1
Proxy-Connection: Keep-Alive

* Read response immediately from proxy CONNECT
< HTTP/1.1 407 Proxy Authentication Required
< Proxy-Authenticate: NEGOTIATE
* gss_init_sec_context() failed: : SPNEGO cannot find mechanisms to negotiate
< Proxy-Authenticate: NTLM
< Proxy-Authenticate: BASIC realm="BCAAA"
< Cache-Control: no-cache
< Pragma: no-cache
< Content-Type: text/html; charset=utf-8
< Proxy-Connection: close
< Connection: close
< Content-Length: 1551
<
* Received HTTP code 407 from proxy after CONNECT
* Expire cleared
* Curl_done
* Closing connection 1
* The cache now contains 0 members
fatal: unable to access 'https://github.com/mockito/mockito.git/':
Unknown SSL protocol error in connection to github.com:443

Thanks
Lukasz

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple