Page MenuHomePhabricator

SSLRead() return error -9806 on git clone
Closed, InvalidPublic

Description

This occurs when attempting to clone via https (insecure http is not setup) from our new Phabricator installation, but only from our 15k commit repo (98MB according to du -hs). Our smaller repos work fine (500-2k commits). There are no errors in the apache error log.

I've tried the git shipped with OS X (10.11), the one installed by homebrew and the one included with SourceTree. All three produce the same error.

➜  dragon git:(master) /usr/bin/git --version
git version 2.5.4 (Apple Git-61)
➜  dragon git:(master) /usr/local/bin/git --version
git version 2.7.0
➜  dragon git:(master) /Applications/SourceTree.app/Contents/Resources/git_local/bin/git --version
git version 2.6.2

I've also tried on my desktop (iMac) and laptop (MacbookPro) both are running OS X 10.11,

Then I tried on the server hosting Phabricator as well (Linux Debian 8). When doing that, I receive a different error:

fatal: unable to access 'https://the-server-domain-here/diffusion/DRGN/dragon.git/': GnuTLS recv error (-110): The TLS connection was non-properly terminated.

Maybe the server side is the actual problem:

$ git --version
git version 2.1.4

Phabricator versions installed:

phabricator f097c9c5951a9238d4de10b08df43fa0a27aea7f (Sat, Feb 6)
archaist 57f6fb59d73994d90cd94143787424ce0fdbf73b (Mon, Jan 25)
phutil f43291e99d36045bc459e5133454c0d8fd8768ea (Thu, Jan 21)

Related Objects

Event Timeline

jcowgar renamed this task from SSLRead() return error -9806 to SSLRead() return error -9806 on git clone.Feb 7 2016, 1:13 PM
jcowgar created this task.
jcowgar updated the task description. (Show Details)

I installed compiled and installed git from sources on the server, v2.7.1 and that did not solve the problem:

$ which git
/usr/local/bin/git
$ which git-http-backend
/usr/bin/git-http-backend
$ git --version
git version 2.7.1

You'll want to start debugging your curl / ssl certificates (I don't think this is a Phabricator issue).

In T10296#157683, @chad wrote:

You'll want to start debugging your curl / ssl certificates (I don't think this is a Phabricator issue).

Why can I push, pull, clone, fetch on all other repos hosted by the same Phabricator instance? All of the others are significantly smaller, but all of them work fine.

You're welcome to spin up a test instance on http://phacility.com/ and reproduce there (our platform - your client).

In T10296#157687, @chad wrote:

You're welcome to spin up a test instance on http://phacility.com/ and reproduce there (our platform - your client).

Thanks, I did and I was able to clone from it fine. This is a bummer as I'm no SSL/HTTPS protocol guru!

I agree, it's fishing. I've done all I can do and gave up. I converted to using SSH instead, which is probably better anyway.

This bug can be closed if you'd like.

Thanks for the advice and help on it.

In cases where we can find the root cause and provide guidance or raise a setup issue, we do. If you do get more information on this, let us know.

epriestley added a subscriber: epriestley.

We can't reproduce this and we haven't learned any new information in more than a month, so I'm going to close it.

Feel free to file a new report if you are able to come up with complete, self-contained, reliable reproduction steps. See Providing Reproduction Steps.