非 TLS 1.3 Azure 存储库上的 TLS1.3 错误 'Wrong version number'

Question

我正在为 Windows (2.33.1.windows.1) 使用最新版本的 Git。这个特定的 Azure 服务器不支持 TLS 1.3（根据 ssllabs.com）。是否有任何配置可以在客户端完成以指示 GIT 使用 TLS 1.2？

这是错误输出：

PS C:\> git clone https://MyOrganization@dev.azure.com/MyOrganization/project1/_git/project1
Cloning into 'project1'...
15:34:54.959787 http.c:781              == Info: Couldn't find host dev.azure.com in the (nil) file; using defaults
15:34:54.991272 http.c:781              == Info:   Trying [ip]:443...
15:34:55.122514 http.c:781              == Info: Connected to dev.azure.com ([ip]) port 443 (#0)
15:34:55.122514 http.c:781              == Info: ALPN, offering h2
15:34:55.122514 http.c:781              == Info: ALPN, offering http/1.1
15:34:55.122514 http.c:781              == Info: successfully set certificate verify locations:
15:34:55.122514 http.c:781              == Info:  CAfile: C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt
15:34:55.122514 http.c:781              == Info:  CApath: none
15:34:55.122514 http.c:781              == Info: TLSv1.3 (OUT), TLS handshake, Client hello (1):
15:34:55.161648 http.c:781              == Info: error:1408F10B:SSL routines:ssl3_get_record:wrong version number
15:34:55.161648 http.c:781              == Info: Closing connection 0
fatal: unable to access 'https://dev.azure.com/MyOrganization/project1/_git/project1/': error:1408F10B:SSL routines:ssl3_get_record:wrong version number

Answer 1

此消息并不意味着客户端无法回退到 TLS 1.2。那应该自动发生。相反，此消息通常意味着远程端发送的消息看起来不像 TLS。这可能是因为您需要某种代理（或者正在使用代理但它失败了），或者因为您有一些机器或程序（可能是非默认的防病毒软件或防火墙）阻止连接成功。

非 TLS 1.3 Azure 存储库上的 TLS1.3 错误 'Wrong version number'

TLS1.3 error 'Wrong version number' on non-TLS 1.3 Azure repository

windows

git

ssl

openssl

azure