title: SSL error when cloning from a https repository using msysgit due to openssl curl
body: <p>When trying to clone from a https repository  I get the following error:</p>
  
  <pre><code>fatal: unable to access 'https://xxx/': error:14077458:SSL routines:SSL23_GET_SERVER_HELLO:reason(1112)
  </code></pre>
  
  <p>According to <a href="http://marc.info/?l=openssl-dev&amp;m=136760073921954&amp;w=2" rel="nofollow noreferrer">this</a> this is caused by a problem in openssl/curl which does not properly handle warning level alerts in SSLv23. On the commandline passing <code>-3</code> to curl sovles the issue.</p>
  
  <p>How can I tell git to "pass" <code>-3</code>to <code>curl</code> while cloning?</p>
  
  <p><strong>Additional Information</strong></p>
  
  <ul>
  <li>I use msysgit: git version 1.8.4.msysgit.0</li>
  <li>with OpenSSL 0.9.8e 23 Feb 2007</li>
  <li>Settign http.sslVerify to false does <strong>not</strong> solve my problem (the connection does not reach this point and bails out before).</li>
  <li>I could reproduce the problem with <code>curl</code>: </li>
  </ul>
  
  <p>.</p>
  
  <pre><code>$ curl -v https://xxx/
  * Adding handle: conn: 0x13dc6e8
  * Adding handle: send: 0
  * Adding handle: recv: 0
  * Curl_addHandleToPipeline: length: 1
  * - Conn 0 (0x13dc6e8) send_pipe: 1, recv_pipe: 0
  * About to connect() to xxx port 443 (#0)
  *   Trying 1.2.3.4...
  * Connected to xxx (1.2.3.4) port 443 (#0)
  * successfully set certificate verify locations:
  *   CAfile: C:\Program Files\Git\bin\curl-ca-bundle.crt
    CApath: none
    * SSLv3, TLS handshake, Client hello (1):
    * error:14077458:SSL routines:SSL23_GET_SERVER_HELLO:reason(1112)
    * Closing connection 0
    curl: (35) error:14077458:SSL routines:SSL23_GET_SERVER_HELLO:reason(1112)
  </code></pre>
  
  <p>and passing the <code>-3</code>option fixes the issue:</p>
  
  <pre><code>$ curl -v -3 https://xxx/
  * ...
  * Connected to xxx (1.2.3.4) port 443 (#0)
  * successfully set certificate verify locations:
  *   CAfile: C:\Program Files\Git\bin\curl-ca-bundle.crt
    CApath: none
    * SSLv3, TLS handshake, Client hello (1):
    * SSLv3, TLS handshake, Server hello (2):
    ...
  </code></pre>
  
  <p><em>Edit</em></p>
  
  <p>The server is running with OpenSSL 1.0.1e  11 Feb 2013 which points to <a href="https://stackoverflow.com/questions/8619706/running-curl-with-openssl-0-9-8-against-openssl-1-0-0-server-causes-handshake-er">this</a></p>