it clone --branch 8.0.x https://git.drupal.org/project/drupal.git
Cloning into 'drupal'...
fatal: unable to access 'https://git.drupal.org/project/drupal.git/': Failed to connect to git.drupal.org port 443: Connection refused

Users should be able to repos download over https.

Comments

mlhess created an issue. See original summary.

basic’s picture

This is now live and fronted with TLS. Redirects are in place for all http requests. All project clone urls need to be updated to display https:// on Drupal.org

basic’s picture

This broke git over ssh, so it has been reverted. DNS updates are underway and propagating.

We should be able to enable SSL directly on the git servers to work around this issue.

greggles’s picture

Title: Update git.drupal.org to serve files over https » Update git.drupal.org to serve files over https and project pages should encourage doing that

Sorry for expanding the scope here, I'll make a new ticket if that seems better :)

mlhess’s picture

basic’s picture

haproxy and httpd are now enforcing a 301 redirect to https for http://git.drupal.org traffic

basic’s picture

The certificate chain was incorrectly ordered:

Certificate chain
 0 s:/OU=Domain Control Validated/OU=PositiveSSL Wildcard/CN=*.drupal.org
   i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA
 1 s:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Certification Authority
   i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root
 2 s:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA
   i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Certification Authority

Which was causing errors such as "server certificate validation failed" when doing git clones.

The chain has been corrected and is now:

Certificate chain
 0 s:/OU=Domain Control Validated/OU=PositiveSSL Wildcard/CN=*.drupal.org
   i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA
 1 s:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA
   i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Certification Authority
 2 s:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Certification Authority
   i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root

Please report any additional issues.

basic’s picture

http support has been re-enabled as well to support older git clients not understanding the redirect

neerajsingh’s picture

I am also facing this issue. I have tried it with http protocol too; Is it an issue at my end or at git server?

$ git clone --branch 8.0.x https://git.drupal.org/project/drupal.git
Cloning into 'drupal'...
fatal: unable to access 'https://git.drupal.org/project/drupal.git/': Failed to connect to git.drupal.org port 443: Connection refused
$ git clone --branch 8.0.x http://git.drupal.org/project/drupal.git
Cloning into 'drupal'...
fatal: unable to access 'http://git.drupal.org/project/drupal.git/': Failed to connect to git.drupal.org port 80: Connection refused
mgifford’s picture

No problem with either using git version 2.5.4 (Apple Git-61).

What are you using? Can you try upgrading?

mlhess’s picture

Status: Active » Postponed (maintainer needs more info)
greggles’s picture

Status: Postponed (maintainer needs more info) » Fixed

I believe this is fixed.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.