服务器证书验证失败。 CAfile：/etc/ssl/certs/ca-certificates.crt CRLfile：无

本文翻译自：server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none

I can push by clone project using ssh, but it doesn't work when I clone project with https. 我可以使用ssh推送克隆项目，但是当我使用https克隆项目时，它不起作用。

The error message that shows me is: 显示我的错误消息是：

server certificate verification failed. CAfile: /etc/ssl/certs/cacertificates.crt CRLfile: none

---

#1楼

参考：https://stackoom.com/question/1qScL/服务器证书验证失败-CAfile-etc-ssl-certs-ca-certificates-crt-CRLfile-无

---

#2楼

TLDR: TLDR：

hostname=XXX
port=443
trust_cert_file_location=`curl-config --ca`

sudo bash -c "echo -n | openssl s_client -showcerts -connect $hostname:$port \
    2>/dev/null  | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p'  \
    >> $trust_cert_file_location"

Long answer 长答案

The basic reason is that your computer doesn't trust the certificate authority that signed the certificate used on the Gitlab server . 根本原因是您的计算机不信任对Gitlab服务器上使用的证书进行签名的证书颁发机构 。 This doesn't mean the certificate is suspicious, but it could be self-signed or signed by an institution/company that isn't in the list of your OS's list of CAs. 这并不意味着证书可疑，但是它可以是自签名的，也可以由不在您的操作系统的CA列表中的机构/公司签名。 What you have to do to circumvent the problem on your comput