title: github: server certificate verification failed
body: <p>I just created a github account and a repository therein, but when trying to create a local working copy using the recommende url via</p>
  
  <pre><code>git clone https://github.com/&lt;user&gt;/&lt;project&gt;.git
  </code></pre>
  
  <p>I get an error like</p>
  
  <blockquote>
    <p>fatal: unable to access '<a href="https://github.com/&lt;user&gt;/&lt;project&gt;.git" rel="noreferrer">https://github.com/&lt;user&gt;/&lt;project&gt;.git</a>': server certificate verification failed. CAfile: /home/&lt;user&gt;/.ssl/trusted.pem CRLfile: none</p>
  </blockquote>
  
  <p>I'm on Debian Jessie, and I would have expected both Debian and GitHub to provide / rely on a selection of commonly accepted CAs, but apparently my system doesn't trust GibHub's certificate.</p>
  
  <p>Any simple way to fix this (without the frequently recommended "GIT_SSL_NO_VERIFY=true" hack and similar work-arounds)?</p>
  
  <p>EDIT:</p>
  
  <p>Additional information:</p>
  
  <ul>
  <li>The ca-certificate package is installed.</li>
  <li>Installing cacert.org's certificates as
  suggested by @VonC didn't change anything.</li>
  <li>My personal ~/.ssl/trusted.pem file does contain a couple of entries, but to be
  honest, I don't remember where the added certificates came from...</li>
  <li><p>When removing ~/.ssl/trusted.pem, the git error message changes to</p>
  
  <pre><code>fatal: unable to access 'https://github.com/tcrass/scans2jpg.git/': Problem with the SSL CA cert (path? access rights?)
  </code></pre></li>
  </ul>
  
  <p>EDIT:</p>
  
  <p>@VonC's advice regarding the git https.sslCAinfo option put me on the right track -- I just added the downloaded cacert.org CAs to my trusted.pem, and now git doesn't complain anymore.</p>