Cettificate error on mybinder.org for a custom git repo

[raphaeljolivet]

mybinder.org has issues with the following git repository : https://git.sophia.mines-paristech.fr/oie/bdappv.git

It fails with this error :

Error resolving ref for git:https%3A%2F%2Fgit.sophia.mines-paristech.fr%2Foie%2Fbdappv/HEAD: 
Unable to run git ls-remote to get the `resolved_ref`: fatal: unable to access 'https://git.sophia.mines-paristech.fr/oie/bdappv/': 
server certificate verification failed. CAfile: none CRLfile: none

This domains is signed with a certificate from USERTrust :

Could you please check what is wrong ?

[welcome[bot]]

Thank you for opening your first issue in this project! Engagement like this is essential for open source projects! :hugs:
If you haven't done so already, check out Jupyter's Code of Conduct. Also, please try to follow the issue template as it helps other other community members to contribute more effectively. You can meet the other Jovyans by joining our Discourse forum. There is also an intro thread there where you can stop by and say Hi! :wave:
Welcome to the Jupyter community! :tada:

[manics]

This is a problem in the base image: https://github.com/jupyterhub/binderhub/blob/fe2ff6b0e81294f6e1835a43ccd99faecb9d4cbc/helm-chart/images/binderhub/Dockerfile#L42-L56

``` $ podman run -it --rm python:3.8-slim-buster bash root@5bcf34d959ce:/# apt-get update -qq root@5bcf34d959ce:/# apt-get install -y -qq git debconf: delaying package configuration, since apt-utils is not installed Selecting previously unselected package perl-modules-5.28. (Reading database ... 6840 files and directories currently installed.) Preparing to unpack .../00-perl-modules-5.28_5.28.1-6+deb10u1_all.deb ... Unpacking perl-modules-5.28 (5.28.1-6+deb10u1) ... Selecting previously unselected package libgdbm-compat4:amd64. Preparing to unpack .../01-libgdbm-compat4_1.18.1-4_amd64.deb ... Unpacking libgdbm-compat4:amd64 (1.18.1-4) ... Selecting previously unselected package libperl5.28:amd64. Preparing to unpack .../02-libperl5.28_5.28.1-6+deb10u1_amd64.deb ... Unpacking libperl5.28:amd64 (5.28.1-6+deb10u1) ... Selecting previously unselected package perl. Preparing to unpack .../03-perl_5.28.1-6+deb10u1_amd64.deb ... Unpacking perl (5.28.1-6+deb10u1) ... Selecting previously unselected package less. Preparing to unpack .../04-less_487-0.1+b1_amd64.deb ... Unpacking less (487-0.1+b1) ... Selecting previously unselected package krb5-locales. Preparing to unpack .../05-krb5-locales_1.17-3+deb10u3_all.deb ... Unpacking krb5-locales (1.17-3+deb10u3) ... Selecting previously unselected package libbsd0:amd64. Preparing to unpack .../06-libbsd0_0.9.1-2+deb10u1_amd64.deb ... Unpacking libbsd0:amd64 (0.9.1-2+deb10u1) ... Selecting previously unselected package libedit2:amd64. Preparing to unpack .../07-libedit2_3.1-20181209-1_amd64.deb ... Unpacking libedit2:amd64 (3.1-20181209-1) ... Selecting previously unselected package libkeyutils1:amd64. Preparing to unpack .../08-libkeyutils1_1.6-6_amd64.deb ... Unpacking libkeyutils1:amd64 (1.6-6) ... Selecting previously unselected package libkrb5support0:amd64. Preparing to unpack .../09-libkrb5support0_1.17-3+deb10u3_amd64.deb ... Unpacking libkrb5support0:amd64 (1.17-3+deb10u3) ... Selecting previously unselected package libk5crypto3:amd64. Preparing to unpack .../10-libk5crypto3_1.17-3+deb10u3_amd64.deb ... Unpacking libk5crypto3:amd64 (1.17-3+deb10u3) ... Selecting previously unselected package libkrb5-3:amd64. Preparing to unpack .../11-libkrb5-3_1.17-3+deb10u3_amd64.deb ... Unpacking libkrb5-3:amd64 (1.17-3+deb10u3) ... Selecting previously unselected package libgssapi-krb5-2:amd64. Preparing to unpack .../12-libgssapi-krb5-2_1.17-3+deb10u3_amd64.deb ... Unpacking libgssapi-krb5-2:amd64 (1.17-3+deb10u3) ... Selecting previously unselected package openssh-client. Preparing to unpack .../13-openssh-client_1%3a7.9p1-10+deb10u2_amd64.deb ... Unpacking openssh-client (1:7.9p1-10+deb10u2) ... Selecting previously unselected package libsasl2-modules-db:amd64. Preparing to unpack .../14-libsasl2-modules-db_2.1.27+dfsg-1+deb10u2_amd64.deb ... Unpacking libsasl2-modules-db:amd64 (2.1.27+dfsg-1+deb10u2) ... Selecting previously unselected package libsasl2-2:amd64. Preparing to unpack .../15-libsasl2-2_2.1.27+dfsg-1+deb10u2_amd64.deb ... Unpacking libsasl2-2:amd64 (2.1.27+dfsg-1+deb10u2) ... Selecting previously unselected package libldap-common. Preparing to unpack .../16-libldap-common_2.4.47+dfsg-3+deb10u6_all.deb ... Unpacking libldap-common (2.4.47+dfsg-3+deb10u6) ... Selecting previously unselected package libldap-2.4-2:amd64. Preparing to unpack .../17-libldap-2.4-2_2.4.47+dfsg-3+deb10u6_amd64.deb ... Unpacking libldap-2.4-2:amd64 (2.4.47+dfsg-3+deb10u6) ... Selecting previously unselected package libnghttp2-14:amd64. Preparing to unpack .../18-libnghttp2-14_1.36.0-2+deb10u1_amd64.deb ... Unpacking libnghttp2-14:amd64 (1.36.0-2+deb10u1) ... Selecting previously unselected package libpsl5:amd64. Preparing to unpack .../19-libpsl5_0.20.2-2_amd64.deb ... Unpacking libpsl5:amd64 (0.20.2-2) ... Selecting previously unselected package librtmp1:amd64. Preparing to unpack .../20-librtmp1_2.4+20151223.gitfa8646d.1-2_amd64.deb ... Unpacking librtmp1:amd64 (2.4+20151223.gitfa8646d.1-2) ... Selecting previously unselected package libssh2-1:amd64. Preparing to unpack .../21-libssh2-1_1.8.0-2.1_amd64.deb ... Unpacking libssh2-1:amd64 (1.8.0-2.1) ... Selecting previously unselected package libcurl3-gnutls:amd64. Preparing to unpack .../22-libcurl3-gnutls_7.64.0-4+deb10u2_amd64.deb ... Unpacking libcurl3-gnutls:amd64 (7.64.0-4+deb10u2) ... Selecting previously unselected package libpcre2-8-0:amd64. Preparing to unpack .../23-libpcre2-8-0_10.32-5_amd64.deb ... Unpacking libpcre2-8-0:amd64 (10.32-5) ... Selecting previously unselected package liberror-perl. Preparing to unpack .../24-liberror-perl_0.17027-2_all.deb ... Unpacking liberror-perl (0.17027-2) ... Selecting previously unselected package git-man. Preparing to unpack .../25-git-man_1%3a2.20.1-2+deb10u3_all.deb ... Unpacking git-man (1:2.20.1-2+deb10u3) ... Selecting previously unselected package git. Preparing to unpack .../26-git_1%3a2.20.1-2+deb10u3_amd64.deb ... Unpacking git (1:2.20.1-2+deb10u3) ... Selecting previously unselected package libsasl2-modules:amd64. Preparing to unpack .../27-libsasl2-modules_2.1.27+dfsg-1+deb10u2_amd64.deb ... Unpacking libsasl2-modules:amd64 (2.1.27+dfsg-1+deb10u2) ... Selecting previously unselected package libxau6:amd64. Preparing to unpack .../28-libxau6_1%3a1.0.8-1+b2_amd64.deb ... Unpacking libxau6:amd64 (1:1.0.8-1+b2) ... Selecting previously unselected package libxdmcp6:amd64. Preparing to unpack .../29-libxdmcp6_1%3a1.1.2-3_amd64.deb ... Unpacking libxdmcp6:amd64 (1:1.1.2-3) ... Selecting previously unselected package libxcb1:amd64. Preparing to unpack .../30-libxcb1_1.13.1-2_amd64.deb ... Unpacking libxcb1:amd64 (1.13.1-2) ... Selecting previously unselected package libx11-data. Preparing to unpack .../31-libx11-data_2%3a1.6.7-1+deb10u2_all.deb ... Unpacking libx11-data (2:1.6.7-1+deb10u2) ... Selecting previously unselected package libx11-6:amd64. Preparing to unpack .../32-libx11-6_2%3a1.6.7-1+deb10u2_amd64.deb ... Unpacking libx11-6:amd64 (2:1.6.7-1+deb10u2) ... Selecting previously unselected package libxext6:amd64. Preparing to unpack .../33-libxext6_2%3a1.3.3-1+b2_amd64.deb ... Unpacking libxext6:amd64 (2:1.3.3-1+b2) ... Selecting previously unselected package libxmuu1:amd64. Preparing to unpack .../34-libxmuu1_2%3a1.1.2-2+b3_amd64.deb ... Unpacking libxmuu1:amd64 (2:1.1.2-2+b3) ... Selecting previously unselected package patch. Preparing to unpack .../35-patch_2.7.6-3+deb10u1_amd64.deb ... Unpacking patch (2.7.6-3+deb10u1) ... Selecting previously unselected package publicsuffix. Preparing to unpack .../36-publicsuffix_20211109.1735-0+deb10u1_all.deb ... Unpacking publicsuffix (20211109.1735-0+deb10u1) ... Selecting previously unselected package xauth. Preparing to unpack .../37-xauth_1%3a1.0.10-1_amd64.deb ... Unpacking xauth (1:1.0.10-1) ... Setting up perl-modules-5.28 (5.28.1-6+deb10u1) ... Setting up libxau6:amd64 (1:1.0.8-1+b2) ... Setting up libkeyutils1:amd64 (1.6-6) ... Setting up libpsl5:amd64 (0.20.2-2) ... Setting up libsasl2-modules:amd64 (2.1.27+dfsg-1+deb10u2) ... Setting up libnghttp2-14:amd64 (1.36.0-2+deb10u1) ... Setting up less (487-0.1+b1) ... debconf: unable to initialize frontend: Dialog debconf: (No usable dialog-like program is installed, so the dialog based frontend cannot be used. at /usr/share/perl5/Debconf/FrontEnd/Dialog.pm line 78.) debconf: falling back to frontend: Readline Setting up krb5-locales (1.17-3+deb10u3) ... Setting up libldap-common (2.4.47+dfsg-3+deb10u6) ... Setting up libkrb5support0:amd64 (1.17-3+deb10u3) ... Setting up libsasl2-modules-db:amd64 (2.1.27+dfsg-1+deb10u2) ... Setting up libx11-data (2:1.6.7-1+deb10u2) ... Setting up librtmp1:amd64 (2.4+20151223.gitfa8646d.1-2) ... Setting up patch (2.7.6-3+deb10u1) ... Setting up libgdbm-compat4:amd64 (1.18.1-4) ... Setting up libpcre2-8-0:amd64 (10.32-5) ... Setting up libk5crypto3:amd64 (1.17-3+deb10u3) ... Setting up libsasl2-2:amd64 (2.1.27+dfsg-1+deb10u2) ... Setting up libperl5.28:amd64 (5.28.1-6+deb10u1) ... Setting up git-man (1:2.20.1-2+deb10u3) ... Setting up libssh2-1:amd64 (1.8.0-2.1) ... Setting up libkrb5-3:amd64 (1.17-3+deb10u3) ... Setting up libbsd0:amd64 (0.9.1-2+deb10u1) ... Setting up publicsuffix (20211109.1735-0+deb10u1) ... Setting up libxdmcp6:amd64 (1:1.1.2-3) ... Setting up libxcb1:amd64 (1.13.1-2) ... Setting up libedit2:amd64 (3.1-20181209-1) ... Setting up libldap-2.4-2:amd64 (2.4.47+dfsg-3+deb10u6) ... Setting up perl (5.28.1-6+deb10u1) ... Setting up libgssapi-krb5-2:amd64 (1.17-3+deb10u3) ... Setting up libx11-6:amd64 (2:1.6.7-1+deb10u2) ... Setting up libxmuu1:amd64 (2:1.1.2-2+b3) ... Setting up openssh-client (1:7.9p1-10+deb10u2) ... Setting up libxext6:amd64 (2:1.3.3-1+b2) ... Setting up libcurl3-gnutls:amd64 (7.64.0-4+deb10u2) ... Setting up liberror-perl (0.17027-2) ... Setting up git (1:2.20.1-2+deb10u3) ... Setting up xauth (1:1.0.10-1) ... Processing triggers for libc-bin (2.28-10+deb10u1) ... root@5bcf34d959ce:/# git ls-remote https://git.sophia.mines-paristech.fr/oie/bdappv.git fatal: unable to access 'https://git.sophia.mines-paristech.fr/oie/bdappv.git/': server certificate verification failed. CAfile: none CRLfile: none ```

[manics]

Actually ignore that, your GitLab site is missing an intermediate certificate:

• https://www.ssllabs.com/ssltest/analyze.html?d=git.sophia.mines-paristech.fr
• https://superuser.com/questions/644343/how-do-you-fix-an-incomplete-ssl-chain
• https://support.kemptechnologies.com/hc/en-us/articles/360004997651-How-to-troubleshoot-SSL-Certificate-Chain-Issues