11

fatal: unable to access 'https://gitlab.com/********/******.git/': schannel: next InitializeSecurityContext failed: Unknown error (0x80092013) - The revocation function was unable to check revocation because the revocation server was offline.

When trying to push my latest changes to GitLab from the GitHub desktop client I receive this error? I've never received this before and its always gone smoovly. When pushing after 1 week not committing its throwing this error?

I'm unsure how to fix this, it doesn't really give you much information.

0b9ff4fb
  • 209
  • 1
  • 2
  • 9

5 Answers5

11

Using git version 2.24.0.windows.2, and this workaround is available:

git config --global http.schannelCheckRevoke false

From the docs:

We do not recommend setting this config value for normal Git usage. This is intended to be an "escape hatch" for situations where the network administrator has restricted the normal usage of SChannel APIs on Windows that Git is trying to use.

Brannon
  • 119
  • 1
  • 4
5

Seems like a problem with your revocation server. Active Directory, may be?

Anyway this bug suggests that an option to turn revocation checking off was merged and is available in git 2.16.1.windows.4.

git config --global http.schannelCheckRevoke false
phd
  • 82,685
  • 13
  • 120
  • 165
0

Your PKI is misconfigured. You must make the CRL/OCSP service available to any client using your certificate.

  1. Setup CRL and OCSP available for all clients.
  2. Issue a new certificate using those.

It's best to just do it right from the beginning. I've setup many CA's and you can't miss the 1000's of lines of text about how you configure CRL and OCSP. Don't ignore them the next time.

Mikael Dúi Bolinder
  • 2,080
  • 2
  • 19
  • 44
0

Have you tried checking the firewall settings, in my case antivirus was blocking the connection between the server and client(windows machine).

Arjun Londhey
  • 199
  • 1
  • 5
-1

I fixed the issue manually deleting all expired certificates from my PC (certmgr.msc). I read this in some forum and it worked however at this point I'm not sure why expired certificates cause this problem in some situations.

Edgar Alejandro Navarro Garcia
  • 1
  • 1