Desktop: schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate

[sdomingos]

Description

This is in a corporate environment, specific security policies, proxies and firewalls are in place.

Using GitHub through Jenkins:
Command "...\git.exe ls-remote -h https://github.com/.....git HEAD" returned status code 128:
stdout:
stderr: fatal: unable to access
'https://github.com/....git/': schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate.

Using the same on a command line works seamlessly.

Any help solving or pinpointing this issue is greatly appreciated.

Version

GitHub Desktop version: git version 2.13.0.windows.1

OS version: Windows Server 2012 R2 Standard

Steps to Reproduce

1. Get behind specific security policies, proxies and firewalls
2. Try to access project configuration page in Jenkins; view Git Repository URL status info

Expected behavior: Repo cloning

Actual behavior: Accessing the repo fails

Reproduces how often: Every time, for every project

Logs

Sep 26, 2017 4:48:17 PM org.eclipse.jetty.server.session.Session beginInvalidate
INFO: Session node01p2vfd8qgjzcabocpvhaff1se0 already being invalidated
Sep 26, 2017 4:54:51 PM jenkins.model.Jenkins$25 run
SEVERE: Restarting VM as requested by admin
Sep 26, 2017 4:54:51 PM jenkins.model.Jenkins cleanUp
INFO: Stopping Jenkins
Sep 26, 2017 4:54:51 PM jenkins.model.Jenkins$21 onAttained
INFO: Started termination
Sep 26, 2017 4:54:51 PM jenkins.model.Jenkins$21 onAttained
INFO: Completed termination
Sep 26, 2017 4:54:51 PM jenkins.model.Jenkins _cleanUpDisconnectComputers
INFO: Starting node disconnection
Sep 26, 2017 4:54:51 PM jenkins.model.Jenkins _cleanUpShutdownPluginManager
INFO: Stopping plugin manager
Sep 26, 2017 4:54:51 PM jenkins.model.Jenkins _cleanUpPersistQueue
INFO: Persisting build queue
Sep 26, 2017 4:54:51 PM jenkins.model.Jenkins _cleanUpAwaitDisconnects
INFO: Waiting for node disconnection completion
Sep 26, 2017 4:54:51 PM jenkins.model.Jenkins cleanUp
INFO: Jenkins stopped
Sep 26, 2017 4:54:53 PM Main deleteWinstoneTempContents
WARNING: Failed to delete the temporary Winstone file C:\Windows\TEMP\winstone\jenkins.war
Sep 26, 2017 4:54:53 PM org.eclipse.jetty.util.log.Log initialized
INFO: Logging initialized @295ms to org.eclipse.jetty.util.log.JavaUtilLog
Sep 26, 2017 4:54:53 PM winstone.Logger logInternal
INFO: Beginning extraction from war file
Sep 26, 2017 4:54:53 PM org.eclipse.jetty.server.handler.ContextHandler setContextPath
WARNING: Empty contextPath
Sep 26, 2017 4:54:53 PM org.eclipse.jetty.server.Server doStart
INFO: jetty-9.4.z-SNAPSHOT
Sep 26, 2017 4:54:54 PM org.eclipse.jetty.webapp.StandardDescriptorProcessor visitServlet
INFO: NO JSP Support for /, did not find org.eclipse.jetty.jsp.JettyJspServlet
Sep 26, 2017 4:54:54 PM org.eclipse.jetty.server.session.DefaultSessionIdManager doStart
INFO: DefaultSessionIdManager workerName=node0
Sep 26, 2017 4:54:54 PM org.eclipse.jetty.server.session.DefaultSessionIdManager doStart
INFO: No SessionScavenger set, using defaults
Sep 26, 2017 4:54:54 PM org.eclipse.jetty.server.session.HouseKeeper startScavenging
INFO: Scavenging every 660000ms
Sep 26, 2017 4:54:54 PM org.eclipse.jetty.server.handler.ContextHandler doStart
INFO: Started w.@1987993{/,file:///E:/Program%20Files%20(x86)/Jenkins/war/,AVAILABLE}{E:\Program Files (x86)\Jenkins\war}
Sep 26, 2017 4:54:54 PM org.eclipse.jetty.server.AbstractConnector doStart
INFO: Started ServerConnector@1f8f5ae{HTTP/1.1,[http/1.1]}{0.0.0.0:8080}
Sep 26, 2017 4:54:54 PM org.eclipse.jetty.server.Server doStart
INFO: Started @1688ms
Sep 26, 2017 4:54:55 PM winstone.Logger logInternal
INFO: Winstone Servlet Engine v4.0 running: controlPort=disabled
Sep 26, 2017 4:54:56 PM jenkins.InitReactorRunner$1 onAttained
INFO: Started initialization
Sep 26, 2017 4:54:56 PM jenkins.InitReactorRunner$1 onAttained
INFO: Listed all plugins
Sep 26, 2017 4:55:01 PM jenkins.InitReactorRunner$1 onAttained
INFO: Prepared all plugins
Sep 26, 2017 4:55:01 PM jenkins.InitReactorRunner$1 onAttained
INFO: Started all plugins
Sep 26, 2017 4:55:01 PM hudson.ExtensionFinder$GuiceFinder$FaultTolerantScope$1 error
INFO: Failed to instantiate optional component hudson.plugins.build_timeout.operations.AbortAndRestartOperation$DescriptorImpl; skipping
Sep 26, 2017 4:55:02 PM jenkins.InitReactorRunner$1 onAttained
INFO: Augmented all extensions
Sep 26, 2017 4:55:02 PM jenkins.InitReactorRunner$1 onAttained
INFO: Loaded all jobs
Sep 26, 2017 4:55:03 PM jenkins.slaves.DeprecatedAgentProtocolMonitor initializerCheck
WARNING: This Jenkins instance uses deprecated Remoting protocols: JNLP2-connect,JNLP3-connectIt may impact stability of the instance. If newer protocol versions are supported by all system components (agents, CLI and other clients), it is highly recommended to disable the deprecated protocols.
Sep 26, 2017 4:55:03 PM jenkins.InitReactorRunner$1 onAttained
INFO: Completed initialization
Sep 26, 2017 4:55:03 PM hudson.model.AsyncPeriodicWork$1 run
INFO: Started Download metadata
Sep 26, 2017 4:55:03 PM hudson.model.AsyncPeriodicWork$1 run
INFO: Finished Download metadata. 7 ms
Sep 26, 2017 4:55:03 PM org.springframework.context.support.AbstractApplicationContext prepareRefresh
INFO: Refreshing org.springframework.web.context.support.StaticWebApplicationContext@18e5c76: display name [Root WebApplicationContext]; startup date [Tue Sep 26 16:55:03 BST 2017]; root of context hierarchy
Sep 26, 2017 4:55:03 PM org.springframework.context.support.AbstractApplicationContext obtainFreshBeanFactory
INFO: Bean factory for application context [org.springframework.web.context.support.StaticWebApplicationContext@18e5c76]: org.springframework.beans.factory.support.DefaultListableBeanFactory@69e46d
Sep 26, 2017 4:55:03 PM org.springframework.beans.factory.support.DefaultListableBeanFactory preInstantiateSingletons
INFO: Pre-instantiating singletons in org.springframework.beans.factory.support.DefaultListableBeanFactory@69e46d: defining beans [authenticationManager]; root of factory hierarchy
Sep 26, 2017 4:55:03 PM org.springframework.context.support.AbstractApplicationContext prepareRefresh
INFO: Refreshing org.springframework.web.context.support.StaticWebApplicationContext@1d15a43: display name [Root WebApplicationContext]; startup date [Tue Sep 26 16:55:03 BST 2017]; root of context hierarchy
Sep 26, 2017 4:55:03 PM org.springframework.context.support.AbstractApplicationContext obtainFreshBeanFactory
INFO: Bean factory for application context [org.springframework.web.context.support.StaticWebApplicationContext@1d15a43]: org.springframework.beans.factory.support.DefaultListableBeanFactory@1fd0a7f
Sep 26, 2017 4:55:03 PM org.springframework.beans.factory.support.DefaultListableBeanFactory preInstantiateSingletons
INFO: Pre-instantiating singletons in org.springframework.beans.factory.support.DefaultListableBeanFactory@1fd0a7f: defining beans [filter,legacy]; root of factory hierarchy
Sep 26, 2017 4:55:04 PM org.jenkinsci.plugins.skipcert.ItemListenerImpl onLoaded
INFO: Bypassing certificate check
Sep 26, 2017 4:55:04 PM hudson.WebAppMain$3 run
INFO: Jenkins is fully up and running
Sep 26, 2017 4:56:18 PM org.eclipse.jetty.server.session.Session beginInvalidate
INFO: Session node0qdcbe63zgppj1anmj9glsupq70 already being invalidated

Additional Information

[sdomingos]

Found a solution: import GitHubs and our Proxy's certificates to Git's keystore
Example: Git's certificate
keytool -import -trustcacerts -file "GitHubsCert.cer" -alias GitHub -keystore "...\Git\mingw64\ssl\certs\ca-bundle.crt"