git, https URLs, invalid SSL certificates

My recent git problem looked like this:

$ git clone https://git.CORP.org/GROUP/REPO.git
Cloning into 'REPO'...
fatal: unable to access 'https://git.CORP.org/GROUP/REPO.git/': SSL certificate problem: unable to get local issuer certificate

What are the available approaches?

1. get a proper certificate and use it!
2. switch off SSL verification!

Approach (1) is certainly better than (2). But maybe you are not in a position to get (1) done. So how does (2) work?

Read up on sslVerify here:

• https://git-scm.com/docs/git-config

You can have a “global” / “fall-back” sslVerify setting, and you can also have one in a section dedicated to a unique server:

; HTTP
[http]
sslVerify
[http "https://weak.example.com"]
sslVerify = false
cookieFile = /tmp/cookie.txt