Re: Cannot git-clone pkgsrc: SSL certificate problem: unable to get local issuer certificate

[Leonardo Taccari <leot%NetBSD.org@localhost>]

Hello Ottavio, 

Ottavio Caruso writes:
> On Sat, 11 May 2019 at 17:28, Ottavio Caruso
> <ottavio2006-usenet2012%yahoo.com@localhost> wrote:
> >
> > Is it just me? I've just compiled devel/git from a local .tar.gz of
> > pkgsrc. I then deleted the local branch and tried to clone it with the
> > newly installed git:
> >
> > $ git clone https://github.com/NetBSD/pkgsrc.git -b pkgsrc-2019Q1
> > --depth=1   pkgsrc-2019Q1
> > Cloning into 'pkgsrc-2019Q1'...
> > fatal: unable to access 'https://github.com/NetBSD/pkgsrc.git/': SSL
> > certificate problem: unable to get local issuer certificate
> >
> > Is this intended behaviour? The only workaround is to change "https" with "git":
> >
> > $ git clone git://github.com/NetBSD/pkgsrc.git -b pkgsrc-2019Q1
> > --depth=1   pkgsrc-2019Q1
> > Cloning into 'pkgsrc-2019Q1'...
> > remote: Enumerating objects: 122608, done.
> > remote: Counting objects: 100% (122608/122608), done.
> > remote: Compressing objects: 100% (101129/101129), done.
> >
> > Any ideas? Where would one get github.com ssl certificates?
> >
>
> I should have added: my system is Linux Mint Debian Edition Cindy. I
> suspect this has to do with curl using a different branch of *ssl from
> the Linux native one. Again: any ideas?
> [...]

Probably that's a similar issue reported as PR pkg/54130:

 <https://gnats.NetBSD.org/54130>

If that's the case possible way to address that:

 - If builtin OpenSSL is used I think you can install
   mozilla-rootcerts-openssl (maybe please check if it can peacefully
   coexists with possible builtin cacerts, if any!)
 - If pkgsrc OpenSSL is used there are probably no problems and
   mozilla-rootcerts-openssl should just work
 - Workaround that by defining CURL_CA_BUNDLE and/or SSL_CERT_FILE 
   and/or GIT_SSL_CERT