Old CMSSW release and GitHub problem

[geonmo]

Dear CMSSW Developer,

I found that the git commands were not working on old CMSSW release. (CMSSW_7_6_6)

Here is a log message when I tried git-clone.

> [geonmo@ui10 src]$ git clone https://github.com/geonmo/manageTools.git
Cloning into 'manageTools'...
fatal: unable to access 'https://github.com/geonmo/manageTools.git/': error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version

I guess that this error was occurred due to a version of embedded git program.

Could you let me know how to solve this?

Regards,

[cmsbuild]

A new Issue was created by @geonmo Geonmo Ryu.

@davidlange6, @Dr15Jones, @smuzaffar, @fabiocos can you please review it and eventually sign/assign? Thanks.

cms-bot commands are listed here

[kpedro88]

Please see the following hypernews threads:
https://hypernews.cern.ch/HyperNews/CMS/get/git/246.html
https://hypernews.cern.ch/HyperNews/CMS/get/git/248.html

[smuzaffar]

closing it, please reopen a new one of you still have such problem

[Martin-Grunewald]

I have this problem in 53X - the two HyperNews threads solutions do not work there:

cmssw-cc6
cmsrel CMSSW_5_3_X_2022-11-06-0000
cd CMSSW_5_3_X_2022-11-06-0000/src
cmsenv
git cms-addpkg HLTrigger/Configuration
Attention: git is unable to access GitHub over https, switching to ssh.
Cloning into '/data/user/gruen/53/CMSSW_5_3_X_2022-11-06-0000/src'...
Switched to a new branch 'from-CMSSW_5_3_X_2022-11-06-0000'
From github.com:Martin-Grunewald/cmssw
 * [new branch]      FixOImuonCustom103X -> my-cmssw/FixOImuonCustom103X
 * [new branch]      FixPFRecoTauDiscriminationByIsiolation -> my-cmssw/FixPFRecoTauDiscriminationByIsiolation
 * [new branch]      HLTmigration1050pre2 -> my-cmssw/HLTmigration1050pre2
 * [new branch]      HLTmigrationTo1120pre2 -> my-cmssw/HLTmigrationTo1120pre2
 * [new branch]      UnRunOff80X -> my-cmssw/UnRunOff80X

Checking out packages
HLTrigger/Configuration

Singularity> git cms-merge-topic -u 40031
From .
 * [new ref]                    -> merge-attempt
fatal: unable to access 'https://github.com/cms-sw/cmssw.git/': error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version
fatal: unable to access 'https://github.com/cms-sw/cmssw.git/': error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version

Singularity> git cms-merge-topic -ssh -u 40031
Unknown option -ssh

Singularity> git config --global url.ssh://[email protected] /
Singularity> git cms-merge-topic -u 40031
fatal: unable to access 'https://github.com/cms-sw/cmssw.git/': error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version
fatal: unable to access 'https://github.com/cms-sw/cmssw.git/': error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version

Please advise @smuzaffar

[Martin-Grunewald]

However, checking out the PR seems to work fine in the PR tests: #40031
So what is the magic used?

[smuzaffar]

@Martin-Grunewald , github had remove dsupport for DSA keys ( https://github.blog/2021-09-01-improving-git-protocol-security-github/ ) . For PR tests, bot uses ecdsa based key. I would suggest to create a key ssh key based on ecdsa and then run ssh -vvv -T [email protected] ( under for cmssw-cc6 env and lxplus) to make sure you can still connect to github. you might have to edit your ~/.ssh/config to add something like

Host github.com
  IdentityFile ~/.ssh/id_ecdsa