SourceTree - cloning from HTTPS Git repo with sslVerify=false

We are setting up Git repositories for students to use as part of a class at our institution. We need to bypass the SSL verification step in order for the repositories to be cloned. For example, cloning a repository works on the command line like this:

$ env GIT_SSL_NO_VERIFY=true git clone
Cloning into 'git'...
Username for '': xxx
Password for '':

Alternatively, this also works:

$ git config --global http.sslVerify false
$ git clone
Cloning into 'git'...
Username for '': xxx
Password for '':

However, when I use SourceTree to attempt to clone the repo, it gets stuck on the authentication part, even with the http.sslVerify in my .gitconfig and the "Disable SSL certificate verification" box checked in the preferences.

Any ideas?

4 answers

Hi Shane,

If you're working on the Mac there's an option on the Git tab in preferences that says "Disable SSL certificate validation" which you can disable. The same option may be on Windows, too (apologies, I'm the Mac dev and haven't got a Windows OS running handy at the moment)


Hi Kieran,

Thanks for the response. As I mentioned in the OP, I have that box checked already.

SourceTree continues asking me for my username and password, even when they are correct.


Sorry missed that somehow. Is this on Windows or Mac?

Mac OS X 10.7.5 and SourceTree 1.5.8.

Strangely, I just tried in a Windows VM, and the repository cloned as expected when I checked the box in the preferences in Windows.

Just as a sidenote, have you taken a look at your repository git config (rather than the global one) to see if http.sslVerify is set in there? If so, it would override the global config.

Actually hold on a minute, you're trying to clone a repository so it should be taking your global config setting. I'll file this as a bug and ready to repro.

Mac OS X 10.7.5 and SourceTree 1.5.8.

Hi Shane,

I've filed an issue for you so it's worth following it from there. We'll still need to validly reproduce this issue but based on what you've said ( I'm creating my own apache server now to have a fake certificate so I can ignore and clone from a URL to clone from.


Suggest an answer

Log in or Sign up to answer
Community showcase
Posted yesterday in United States

Administrators Cleanup

Good morning, After a long weekend cleaning up, I am still in the cleanup mode 😊. I am curious to know: When do you feel the urgency to cleanup your Atlassian Tools? How many times do y...

23 views 0 0
View post

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you