Git clone or push fails: error setting certificate file ca-bundle.crt

Problem

Git operations (clone, push, fetch) over HTTPS fail in JetBrains IDEs with the following error:

fatal: unable to access 'https://github.com/<owner>/<repo>.git/': error setting certificate file: C:/Users/<user>/AppData/Local/Programs/Git/mingw64/etc/ssl/certs/ca-bundle.crt

The same error occurs both inside the IDE and when running the equivalent git command from a terminal outside the IDE, which indicates the problem is in the Git installation, not in the IDE integration.

Cause

The CA certificate bundle file (ca-bundle.crt) referenced in the Git configuration does not exist at the expected path. This typically happens after an incomplete Git installation, an upgrade that removed the file, or accidental file deletion.

Resolution

Verify whether the file referenced in the error message exists on disk, for example:

C:\Users\<user>\AppData\Local\Programs\Git\mingw64\etc\ssl\certs\ca-bundle.crt

If the file is missing, apply one of the following options.

Option 1: Reinstall Git (recommended)

Download Git for Windows from git-scm.com and reinstall to restore the bundled certificate file.

Option 2: Use the Windows Certificate Store

Configure Git to use the system certificate store instead of the bundled file:

git config --global http.sslBackend schannel

Option 3: Copy the certificate file from another Git installation

If another working Git installation is available locally or on another machine, copy ca-bundle.crt from <git-install-path>\mingw64\etc\ssl\certs\ to the same location in the broken installation.

Option 4: Disable SSL verification (temporary, not recommended)

As a short-term workaround to complete a single operation, SSL verification can be disabled:

git config --global http.sslVerify false

This option weakens connection security and must not be used as a long-term solution. Revert it once the certificate file is restored:

git config --global --unset http.sslVerify