`gh auth login` has `tls: failed to verify certificate: x509: certificate signed by unknown authority`
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 30/100
- Issue type
- Bug
- Clarity
- Needs clarification
- Activity status
- Quiet
- Tech stack
- docker, git, github, shell
- Domain
- devops, infrastructure, security
Research direction
Start by reproducing the failure in the termux/termux-docker image with pkg upgrade, pkg install gh, and gh auth login; also inspect the referenced Git LFS build.sh section. Trace why certificate authorities are unavailable in termux-docker, then verify that GitHub CLI and Git LFS work without SSH-only access or GIT_SSL_NO_VERIFY=1.
Written by the indexing model from the issue text.
Description
This issue is to track the termux-docker variant of tls: failed to verify certificate: x509: certificate signed by unknown authority.
Every type of termux-docker has this issue, and my recent heavy changes did not introduce it. Unfortunately, I didn't fix it because I don't know how to.
Sometimes, GNU/Linux or normal Android can have tls: failed to verify certificate: x509: certificate signed by unknown authority also, but when they do, it's thought to be due to a different root cause, because generic solutions for this error from GNU/Linux and normal Android don't seem to help.
Some known affected programs:
GitHub CLI
Git LFS
Most programs are not known to be affected.
Reproduction steps
GitHub CLI
docker run -it termux/termux-docker:x86_64 # any architecture
pkg upgrade
pkg install gh
gh auth login
Git LFS
Only currently known workarounds
GitHub CLI
# add the SSH remote of your repo to your local clone
git remote add ssh [email protected]:you/your-repo.git
# create SSH key inside termux-docker and add it to your GitHub account, then
git push -f ssh your-branch
Git LFS
export GIT_SSL_NO_VERIFY=1
- Dominant language
- Shell
- Stars
- 748
- Forks
- 112
- PR merge metrics
- No merged PRs in 30d
Getting set up
- Ships a Dockerfile or Docker Compose file
- No pull request template
- No contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from termux/termux-docker
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
termux/termux-docker#69 · 3 comments ·
-
github_actions
Difficulty 4/5 3-5 days Newbie friendliness 35/100
termux/termux-docker#89 · 2 comments ·
-
`postgresql` and some other reverse dependencies of `libandroid-shmem` do not workPossibly taken @robertkirkman claimed this 116 days ago. Open
Difficulty 4/5 3-5 days Newbie friendliness 35/100
termux/termux-docker#87 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 45/100
termux/termux-docker#76 · 4 comments ·
-
github_actions
Difficulty 4/5 3-5 days Newbie friendliness 35/100
termux/termux-docker#64 · 4 comments ·
All issues in termux/termux-docker
Similar issues
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
Maintainers usually reply within 1 day
-
Link Checker ReportOpenautomated issue report
Difficulty 1/5 Under an hour Newbie friendliness 85/100
a2aproject/A2A#2387 ·
Maintainers usually reply within 4 days
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
Maintainers usually reply within 1 day
-
curriculum documentation quality
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
githubnext/gh-aw-workshop#4965 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
ajeetdsouza/zoxide#1350 ·
Maintainers usually reply within 2 days