[Open Crypto Project] #22: git https access started throwing mysterious errors

[Open Crypto Project]

#22: git https access started throwing mysterious errors
------------------------------------+------------------
 Reporter:  meisterpaul1 at yandex.ru  |       Owner:  sra
     Type:  defect                  |      Status:  new
 Priority:  blocker                 |   Milestone:
Component:  sysadmin                |     Version:
 Keywords:                          |  Blocked By:
 Blocking:                          |
------------------------------------+------------------
 Pavel's original report:

 {{{
 $ git clone
 https://git.cryptech.is/core/platform/novena.git
 Cloning into 'novena'...
 error: inflate: data stream error (incorrect header check)
 error: inflate: data stream error (incorrect header check)
 error: inflate: data stream error (incorrect header check)
 error: inflate: data stream error (incorrect header check)
 error: File 283bfbeeb7fb5767815c10ea98bb155638d4bfb3
 (https://git.cryptech.is/core/platform/novena.git/objects/28/3bfbeeb7fb5767815c10ea98bb155638d4bfb3)
 corrupt
 Checking connectivity... done.
 }}}

 * Reproducible problem (multiple users, multiple times)
 * Only affects HTTPS access, not HTTP
 * OpenSSL and git had been upgraded recently, but no repository content
 had changed since upgrade
 * git HTTPS configuration ("dumb HTTP") was not using server git binary at
 all, so upgrade irrelevant
 * "git fsck" did not report any horrible errors

 Several bystanders at IETF speculated that this looked like a TLS
 compression problem, so we tried rebuilding Apache.  No change.

 Same bystanders also commented that git's "dumb HTTP" mode is not just
 slow but also flaky, and prone to just this sort of mysterious errors, so
 recommended converting to git "smart HTTP" mode.

 Converting to "smart HTTP" mode //seems// to have fixed the problem.  At
 least, I can no longer reproduce it.  Time will tell.

 Leaving ticket open for monitoring.

 Pavel, please confirm that HTTPS access now works for you?

--
Ticket URL: <https://trac.cryptech.is/ticket/22>
Open Crypto Project <https://wiki.cryptech.is/>