git拉取代码时报SSL certificate problem: unable to get local issuer certificate

这个问题通常是由于缺少证书或证书不正确导致的。可以尝试以下解决方法：

1. 更新证书

   git config --global http.sslVerify true

2. 手动添加证书

将证书文件（.pem）复制到Git的证书目录中，然后运行以下命令：

   git config --global http.sslCAInfo /path/to/certificate.pem

3. 关闭SSL验证

不推荐使用，但可以通过以下命令关闭SSL验证：

   git config --global http.sslVerify false

相关问题

git SSL certificate problem: unable to get local issuer certificate

Hi there! It seems like you're facing an SSL certificate problem while using Git and getting the error "unable to get local issuer certificate." This error usually occurs when Git is unable to verify the SSL certificate of the remote repository. To fix this issue, you can try the following steps:

1. Update Git: Make sure you're using the latest version of Git. Older versions may have issues with SSL certificates.

2. Set the SSL verify flag: Run the following command to disable SSL verification temporarily:

git config --global http.sslVerify false

Note: This is not recommended for security reasons, but it can help identify if the SSL certificate is the root cause of the problem.

3. Configure Git to use the correct certificate bundle: Run the following command:

git config --global http.sslCAinfo /path/to/certificate.pem

Replace "/path/to/certificate.pem" with the path to your SSL certificate bundle. You can also try using a different certificate bundle if the current one is causing issues.

4. Update your system's certificate store: Sometimes, the SSL certificates on your system might be outdated or missing. Update your system's certificate store and try again.

If none of these steps resolve the issue, it's possible that the SSL certificate is actually missing or not properly installed on the server you're trying to connect to. In such cases, you may need to contact the server administrator or use alternative methods for cloning or accessing the repository.

I hope this helps! Let me know if you have any further questions.

拉取代码报错：SSL certificate problem: unable to get local issuer certificate

### 解决 `git clone` 时遇到的 SSL 证书问题

当执行 `git clone` 或其他 Git 操作时，如果遇到错误提示 "SSL certificate problem: unable to get local issuer certificate" ，这通常是因为客户端无法验证服务器提供的 SSL 证书的有效性。

#### 方法一：禁用 SSL 验证
可以通过设置环境变量或配置 Git 来忽略 SSL 验证：

通过命令行临时关闭 SSL 验证：

export GIT_SSL_NO_VERIFY=true

永久修改 `.gitconfig` 文件来全局关闭 HTTPS 的 SSL 验证：

git config --global http.sslVerify false

需要注意的是，在生产环境中不建议完全禁用 SSL 验证，因为这样会带来安全风险[^2]。

#### 方法二：安装并指定 CA 证书路径
对于 AIX 系统而言，由于默认目录结构不同，可能需要手动下载受信任的 CA 根证书文件，并告知 Git 使用该文件作为认证依据。具体做法如下：

从官方源获取最新版 cacert.pem 文件：

curl https://curl.se/ca/cacert.pem -o /path/to/cacert.pem

接着更新 Git 设置指向此 PEM 文件位置：

git config --global http.sslCAPath /path/to/

注意这里 `/path/to/` 应替换为实际存储cacert.pem的位置。不过考虑到AIX特殊性，上述 curl指令中的目标路径需根据实际情况调整。

#### 方法三：针对特定仓库绕过 SSL 检查
仅对该次克隆操作跳过 SSL 检验而不影响其它项目：

GIT_SSL_NO_VERIFY=true git clone https://example.com/repo.git

这种方法适用于一次性任务或是测试场景下快速解决问题的需求[^3]。