windows - 非 TLS 1.3 Azure 存储库上的 TLS1.3 错误 'Wrong version number'

Question

我使用的是最新版本的 Windows 版 Git (2.33.1.windows.1)。此特定 Azure 服务器不支持 TLS 1.3(根据 ssllabs.com)。是否可以在客户端进行任何配置来指示 GIT 使用 TLS 1.2？

这是错误输出:

PS C:\> git clone https://<a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="733e0a3c0114121d1a0912071a1c1d331716055d12090601165d101c1e" rel="noreferrer noopener nofollow">[email protected]</a>/MyOrganization/project1/_git/project1
Cloning into 'project1'...
15:34:54.959787 http.c:781              == Info: Couldn't find host dev.azure.com in the (nil) file; using defaults
15:34:54.991272 http.c:781              == Info:   Trying [ip]:443...
15:34:55.122514 http.c:781              == Info: Connected to dev.azure.com ([ip]) port 443 (#0)
15:34:55.122514 http.c:781              == Info: ALPN, offering h2
15:34:55.122514 http.c:781              == Info: ALPN, offering http/1.1
15:34:55.122514 http.c:781              == Info: successfully set certificate verify locations:
15:34:55.122514 http.c:781              == Info:  CAfile: C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt
15:34:55.122514 http.c:781              == Info:  CApath: none
15:34:55.122514 http.c:781              == Info: TLSv1.3 (OUT), TLS handshake, Client hello (1):
15:34:55.161648 http.c:781              == Info: error:1408F10B:SSL routines:ssl3_get_record:wrong version number
15:34:55.161648 http.c:781              == Info: Closing connection 0
fatal: unable to access 'https://dev.azure.com/MyOrganization/project1/_git/project1/': error:1408F10B:SSL routines:ssl3_get_record:wrong version number

Answer 1

此消息并不意味着客户端无法回退到 TLS 1.2。这应该会自动发生。相反，此消息通常意味着远程端发送的消息看起来不像 TLS。这可能是因为您需要某种代理(或者正在使用代理但失败)，或者因为您有某些机器或程序(可能是非默认防病毒软件或防火墙)阻止连接成功。