joan2937 / pigpio

pigpio is a C library for the Raspberry which allows control of the General Purpose Input Outputs (GPIO).
The Unlicense
1.43k stars 403 forks source link

`git pull` or `git clone` actions return 'https://github.com/joan2937/pigpio/': SSL certificate problem: certificate is not yet valid #584

Closed EmbeddedBacon closed 10 months ago

EmbeddedBacon commented 10 months ago

While trying to perform a git pull action the returned out is

fatal: unable to access 'https://github.com/joan2937/pigpio/': SSL certificate problem: certificate is not yet valid

I found one solution was to set the http.sslVerify flag to false. I would like to keep the this flag set to true if at all possible.

This is the SBC info from screenfetch

OS: Arch Linux 
Kernel: armv7l Linux 5.10.78-2-raspberrypi-ARCH
Uptime: 4d 16h 35m
Packages: 267
Shell: bash 5.1.16
Disk: 7.9G / 30G (28%)
CPU: ARMv7 rev 4 (v7l) @ 4x 1.2GHz
RAM: 492MiB / 930MiB

This is the output from git config -l --show-origin

file:/home/alarm/.gitconfig     http.sslbackend=openssl
file:/home/alarm/.gitconfig     http.sslverify=true
file:.git/config        core.repositoryformatversion=0
file:.git/config        core.filemode=true
file:.git/config        core.bare=false
file:.git/config        core.logallrefupdates=true
file:.git/config        remote.origin.url=https://github.com/joan2937/pigpio
file:.git/config        remote.origin.fetch=+refs/heads/*:refs/remotes/origin/*
file:.git/config        branch.master.remote=origin
file:.git/config        branch.master.merge=refs/heads/master

Originally the http.sslbackend flag was not configured, but was set during trying some resolution was searching the net. With the http.sslbackend set to openssl is when I see the "certificate is not yet valid". If the http.sslbackend flag is set to "schannel" then the output is

fatal: Unsupported SSL backend 'schannel'. Supported SSL backends:
        openssl
EmbeddedBacon commented 10 months ago

Found out that my date/time was not setup correctly on the RasPi. After installing the NTP package, then starting and enabling the service the system was rebooted. The correct time was not set and was able to perform a get pull without any issue.