When using openEO Platform via JupyterLab and you want to track your code via git and your institution has a personal git server you might run into the issue that the server’s CA-certificate is not available on the virtual machine running the JupyterLab.
The error printed when trying to clone a repository will be:
server certificate verification failed. CAfile: none CRLfile: none
You need to download and add the certificate to your git repository to be able to access your institutional server.
You can do this via:
→ open a terminal with the JupyterLab launcher
→ Replace ‘myinstitution’ in the following code and run it:
openssl s_client -showcerts -servername git.myinstitution.com -connect 127.0.0.1:4443 </dev/null 2>/dev/null | sed -n -e '/BEGIN\ CERTIFICATE/,/END\ CERTIFICATE/ p' > git-myinstitution-com.pem
→ add the certificate for a single user (also replace ‘myinstitution’):
git config --global http."https://git.myinstitution.com/".sslCAInfo ~/git-myinstitution-com.pem
→ This adds the following lines to ~/.gitconfig:
[http "https://git.myinstitution.com/"]
sslCAInfo = /home/user/git-myinstitution-com.pem
Done! You can use git with the CA-cert of your institution from the openEO JupyterLab.
Please avoid other workarounds such as disabeling the ssl verification in the git config.