when i do a "git pull origin" it gives a permission denied . How can i resolve this?

Question

When i do a git pull origin, I see below error. I checked the permissions of ".git" folder and keys and config. It was working working for few years now. All of sudden it started giving this error. This works from the windows machine. So i am guessing the connectivity is not an issue.

"FIPS integrity verification test failed

Permission denied (keyboard-interactive,publickey)

fatal: The remote end hung up unexpectedly"

It looks like the credentials with which you authenticate yourself against the origin are no longer correct. Check the security configuration on the origin (or ask whoever admins the origin to do so). — Jeen Broekstra, Jul 27 '18 at 04:47

score 2 · Answer 1 · answered Jul 27 '18 at 04:47

2

In the wake of GitHub deprecating weak cryptographic standards, your own remote repository server (referenced by "origin") might also have deprecated some of those standards.

Which means your local openssl might be too old.

answered Jul 27 '18 at 04:47

VonC

1,262,500
529
4,410
5,250

yum update openssl , still shows OpenSSL 1.0.1e-fips 11 Feb 2013 – Jinu Mohan Jul 27 '18 at 05:37
Exactly, try and seek a more recent version – VonC Jul 27 '18 at 05:37
i get error when i run ./config **This system (linux-x86_64) is not supported. See file INSTALL for details.** – Jinu Mohan Jul 27 '18 at 07:35
@JinuMohan What is your OS? – VonC Jul 27 '18 at 07:35
Oracle Linux 6 u3 (Intel 64-bit, Developer) – Jinu Mohan Jul 27 '18 at 10:53
So it is FIPS capable (https://blogs.oracle.com/linux/oracle-linux-fips), but using a non-validated cryptography (https://stackoverflow.com/a/30490010/6309). Can you check its FIPS suppoert level? (https://stackoverflow.com/a/21492776/6309) – VonC Jul 27 '18 at 11:24
sorry for the delay , i am not sure which exact command you are asking me to run – Jinu Mohan Jul 29 '18 at 18:03
@JinuMohan What is written in https://stackoverflow.com/a/21492776/6309: `cat /usr/local/ssl/include/openssl/opensslconf.h | grep -A 2 -i fips` – VonC Jul 29 '18 at 19:12
I do not see a directory /usr/local/ssl – Jinu Mohan Jul 30 '18 at 10:43

score 0 · Answer 2 · answered Sep 05 '18 at 05:38

It turns out that the failure was happening because git was doing a curl during pull and curl was failing with illegal instruction problem https://gryzli.info/2016/05/28/centos-6-curl-ssl-illegal-instruction-error/

once I added export NSS_DISABLE_HW_GCM=1, the git pull worked fine.

when i do a "git pull origin" it gives a permission denied . How can i resolve this?

2 Answers2