cleveragents/cleveragents-core

Fork 3

BUG-HUNT: [Infrastructure] TLS Configuration Error on git.cleveragents.com #1532

New issue

Open

opened 2026-04-02 20:43:53 +00:00 by freemo · 1 comment

freemo commented

2026-04-02 20:43:53 +00:00

Owner

Bug Report: [Infrastructure] - TLS Configuration Error on git.cleveragents.com

Severity Assessment

Impact: Critical. Prevents all git operations, blocking development and CI/CD pipelines.
Likelihood: High. Consistently reproducible.
Priority: Critical

Location

Service: git.cleveragents.com

Description

The git server at git.cleveragents.com is not correctly configured for TLS. When attempting to clone the cleveragents/cleveragents-core repository, the operation fails with a gnutls_handshake() failed: The server name sent was not recognized error. This indicates that the server's TLS certificate does not include the git.cleveragents.com hostname, or that the server is not configured to handle requests for this hostname.

Evidence

$ git clone https://git.cleveragents.com/cleveragents/cleveragents-core.git
Cloning into 'cleveragents-core'...
fatal: unable to access 'https://git.cleveragents.com/cleveragents/cleveragents-core.git/': gnutls_handshake() failed: The server name sent was not recognized

$ curl -v https://git.cleveragents.com/cleveragents/cleveragents-core.git
*   Trying 13.248.169.48:443...
* Connected to git.cleveragents.com (13.248.169.48) port 443 (#0)
* ALPN: offers h2,http/1.1
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: /etc/ssl/certs
{ [5 bytes data]
* TLSv1.3 (IN), TLS alert, unrecognized name (624):
{ [2 bytes data]
* OpenSSL/3.0.18: error:0A000458:SSL routines::tlsv1 unrecognized name
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
* Closing connection 0
curl: (35) OpenSSL/3.0.18: error:0A000458:SSL routines::tlsv1 unrecognized name

Expected Behavior

The git clone operation should complete successfully.

Actual Behavior

The git clone operation fails with a TLS error.

Suggested Fix

The TLS certificate for git.cleveragents.com needs to be updated to include the correct hostname. Alternatively, the server configuration needs to be adjusted to correctly handle requests for this hostname.

Category

infrastructure

Automated by CleverAgents Bot
Supervisor: Bug Hunting | Agent: ca-bug-hunter

## Bug Report: [Infrastructure] - TLS Configuration Error on git.cleveragents.com ### Severity Assessment - **Impact**: Critical. Prevents all git operations, blocking development and CI/CD pipelines. - **Likelihood**: High. Consistently reproducible. - **Priority**: Critical ### Location - **Service**: git.cleveragents.com ### Description The git server at `git.cleveragents.com` is not correctly configured for TLS. When attempting to clone the `cleveragents/cleveragents-core` repository, the operation fails with a `gnutls_handshake() failed: The server name sent was not recognized` error. This indicates that the server's TLS certificate does not include the `git.cleveragents.com` hostname, or that the server is not configured to handle requests for this hostname. ### Evidence ```bash $ git clone https://git.cleveragents.com/cleveragents/cleveragents-core.git Cloning into 'cleveragents-core'... fatal: unable to access 'https://git.cleveragents.com/cleveragents/cleveragents-core.git/': gnutls_handshake() failed: The server name sent was not recognized $ curl -v https://git.cleveragents.com/cleveragents/cleveragents-core.git * Trying 13.248.169.48:443... * Connected to git.cleveragents.com (13.248.169.48) port 443 (#0) * ALPN: offers h2,http/1.1 } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Client hello (1): } [512 bytes data] * CAfile: /etc/ssl/certs/ca-certificates.crt * CApath: /etc/ssl/certs { [5 bytes data] * TLSv1.3 (IN), TLS alert, unrecognized name (624): { [2 bytes data] * OpenSSL/3.0.18: error:0A000458:SSL routines::tlsv1 unrecognized name 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 * Closing connection 0 curl: (35) OpenSSL/3.0.18: error:0A000458:SSL routines::tlsv1 unrecognized name ``` ### Expected Behavior The git clone operation should complete successfully. ### Actual Behavior The git clone operation fails with a TLS error. ### Suggested Fix The TLS certificate for `git.cleveragents.com` needs to be updated to include the correct hostname. Alternatively, the server configuration needs to be adjusted to correctly handle requests for this hostname. ### Category infrastructure --- **Automated by CleverAgents Bot** Supervisor: Bug Hunting | Agent: ca-bug-hunter

freemo referenced this issue

2026-04-02 20:48:36 +00:00

fix(infra): resolve TLS handshake failure on git.dev.cleveragents.com blocking repository clone #1543

freemo referenced this issue

2026-04-02 20:49:19 +00:00

fix(infra): resolve TLS handshake failure on git.dev.cleveragents.com blocking repository clone #1543

freemo self-assigned this

2026-04-02 20:59:00 +00:00

freemo referenced this issue

2026-04-02 23:00:47 +00:00

fix(infra): resolve TLS handshake failure on git.cleveragents.com blocking repository clone #1590

freemo referenced this issue

2026-04-02 23:01:06 +00:00

TEST-INFRA: [ci-pipeline-design] Git clone fails with gnutls_handshake error #1592

freemo referenced this issue

2026-04-02 23:01:23 +00:00

fix(infra): resolve TLS handshake failure on git.cleveragents.com blocking repository clone #1590

freemo referenced this issue

2026-04-02 23:01:46 +00:00

TEST-INFRA: [BLOCKER] Unable to clone repository due to TLS/SNI issue on git.cleveragents.com #1593

freemo referenced this issue

2026-04-02 23:02:09 +00:00

Proposal: improve ca-bug-hunter — prevent false positive infrastructure bug reports #1595

freemo commented

2026-04-02 23:02:56 +00:00

Author

Owner

Label compliance fix applied:

Added missing label: Type/Bug
Added missing label: Priority/Medium
Reason: Per CONTRIBUTING.md, every issue must have exactly one Type/* and one Priority/* label. This BUG-HUNT infrastructure issue was inferred as Type/Bug and Priority/Medium.

Automated by CleverAgents Bot
Supervisor: Backlog Grooming | Agent: ca-backlog-groomer

Label compliance fix applied: - Added missing label: `Type/Bug` - Added missing label: `Priority/Medium` - Reason: Per CONTRIBUTING.md, every issue must have exactly one `Type/*` and one `Priority/*` label. This BUG-HUNT infrastructure issue was inferred as `Type/Bug` and `Priority/Medium`. --- **Automated by CleverAgents Bot** Supervisor: Backlog Grooming | Agent: ca-backlog-groomer

freemo added a new dependency

2026-04-02 23:03:34 +00:00

#1590 fix(infra): resolve TLS handshake failure on git.cleveragents.com blocking repository clone

freemo referenced this issue

2026-04-02 23:07:50 +00:00

TEST-INFRA: [ci-environment] Unable to clone repository due to TLS/SSL handshake failure #1601

freemo referenced this issue

2026-04-02 23:21:57 +00:00

CRITICAL: Git clone fails in automated environment due to TLS/SNI issue #1640

freemo referenced this issue

2026-04-02 23:24:09 +00:00

[Automated] Backlog Groomer Session State — v3.7.0 #1463