sonatype / nexus-public

Sonatype Nexus Repository Open-source codebase mirror
https://www.sonatype.com/products/repository-oss-download
Eclipse Public License 1.0
1.83k stars 557 forks source link

Error using sonatype nexus repo manager as git-lfs storage #408

Open thoefkens opened 3 weeks ago

thoefkens commented 3 weeks ago

We have a git repo configured to use lfs with Nexus as the storage. When checking out the repo, some users get this error:

Error downloading object: base/WIN10-IOT-LTSC-2021_21H1_CFLS246_MPC_3.3.0.iso (d3c5439): Smudge error: Error downloading base/WIN10-IOT-LTSC-2021_21H1_CFLS246_MPC_3.3.0.iso (d3c54398967b6e6234b40dbbccf50825a5ace05f8b895c372f7bec09e76d59b6): batch response: Post "https://nexus2.muc.ct.accounts.intern/repository/gitlfs-hosted/info/lfs/objects/batch": tls: server sent certificate containing RSA key larger than 8192 bits

System environment Occurs on both macOS and Windows.

Output of git lfs env

git-lfs/3.5.1 (GitHub; darwin arm64; go 1.22.1)
git version 2.39.3 (Apple Git-146)

Endpoint=https://nexus2.muc.ct.accounts.intern/repository/gitlfs-hosted/info/lfs (auth=none)
LocalWorkingDir=/Users/username/git/gd/ngis-pkg
LocalGitDir=/Users/username/git/gd/ngis-pkg/.git
LocalGitStorageDir=/Users/username/git/gd/ngis-pkg/.git
LocalMediaDir=/Users/username/git/gd/ngis-pkg/.git/lfs/objects
LocalReferenceDirs=
TempDir=/Users/username/git/gd/ngis-pkg/.git/lfs/tmp
ConcurrentTransfers=8
TusTransfers=false
BasicTransfersOnly=false
SkipDownloadErrors=false
FetchRecentAlways=false
FetchRecentRefsDays=7
FetchRecentCommitsDays=0
FetchRecentRefsIncludeRemotes=true
PruneOffsetDays=3
PruneVerifyRemoteAlways=false
PruneVerifyUnreachableAlways=false
PruneRemoteName=origin
LfsStorageDir=/Users/username/git/gd/ngis-pkg/.git/lfs
AccessDownload=none
AccessUpload=none
DownloadTransfers=basic,lfs-standalone-file,ssh
UploadTransfers=basic,lfs-standalone-file,ssh
GIT_ASKPASS=/Applications/Visual Studio Code.app/Contents/Resources/app/extensions/git/dist/askpass.sh
GIT_EXEC_PATH=/Applications/Xcode.app/Contents/Developer/usr/libexec/git-core
git config filter.lfs.process = "git-lfs filter-process"
git config filter.lfs.smudge = "git-lfs smudge -- %f"
git config filter.lfs.clean = "git-lfs clean -- %f"

Additional context The certificate of the Nexus server is a 4096-bit RSA certicate, which is added as a trusted certificate for git and the operating system.

nblair commented 2 weeks ago

Thanks for opening an issue @thoefkens - you haven't shared any details about the Repository Manager install that you are working with. What version is it using? Is it OSS or Pro? If it's pro, opening a case with through our support portal would be the fastest way to help troubleshoot.