git version is old and does not work with x509 certificates

[jomach]

ISSUE TYPE

• Bug Report

SUMMARY

If we need to use the git options sslCert, sslKey and sslCAInfo with git 1.8 and centos7 we get:

NSS: client certificate not found (nickname not specified)

ENVIRONMENT

• AWX version: 6.1.0
• AWX install method: docker
• Ansible version: 2.8.2
• Operating System: centos7
• Web Browser: Chrome

STEPS TO REPRODUCE

1- docker run ansible/awx_task:latest bash
2- setup gitconfig to use sslCert (so that x509 handshake is needed)
3- export GIT_CURL_VERBOSE=1
4 - git clone

EXPECTED RESULTS

git clone works

ACTUAL RESULTS

NSS: client certificate not found (nickname not specified)
Cloning into 'repo'...

• About to connect() to someServer port 443 (#0)
• Trying someServer
• Connected to someServer (xxxxx) port 443 (#0)
• Initializing NSS with certpath: sql:/etc/pki/nssdb
• CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
• NSS: client certificate not found (nickname not specified)
• NSS error -12227 (SSL_ERROR_HANDSHAKE_FAILURE_ALERT)
• SSL peer was unable to negotiate an acceptable set of security parameters.
• Closing connection 0

ADDITIONAL INFORMATION

Upgrade from git version fixes the problem