Cloning stuck (USERTrust certificate not supported?)

[phineas42]

Details

• Project URL: https://readthedocs.org/projects/public-docs
• Repository URL: https://code.oscer.ou.edu/phineas/docs.git

Expected Result

git clone over https.

Actual Result

Stuck at "Cloning" (Same symptom as #2047)

Notes

The repo server does not log any access, leading me to suspect an SSL issue between read-the-docs and my repo. The certificate chain is identical to the one in #1885 . Was the resolution in #1885 to trust the chain, or to make an exception for the site?

[phineas42]

According to the issuer, InCommon, the following is the certificate chain:

• AddTrust External CA Root [Text/Base64]
• USERTrust RSA Certification Authority [Text/Base64]
• InCommon RSA Server CA [Base64]
• End-Entity Certificate

InCommon Certificate Revocation List [DER]

My systems needed both of the intermediate CAs added, but not the root CA.

[agjohnson]

We took no action to resolve this. We don't want to make custom exceptions for SSL, as this isn't going to be manageable. If the cert chain is included in Ubuntu, we can support it. If you can confirm the cert chain works on 16.04, this might be a matter of running 16.04 on our builders -- which is coming soonish.

[stsewd]

Closing this as the user hasn't responded or given more information, feel free to reopen with more information if you are still having this problem :).

Also see #2226 (comment)