# Project SCM sync error on new install

**URL:** <https://forum.ansible.com/t/project-scm-sync-error-on-new-install/32070>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [January 27, 2020, 10:34pm UTC](https://forum.ansible.com/t/project-scm-sync-error-on-new-install/32070 "2020-01-27T22:34:00Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dpowell](https://avatars.discourse-cdn.com/v4/letter/d/e95f7d/32.png) [@dpowell](https://forum.ansible.com/u/dpowell)\
**Post date:** [January 27, 2020, 10:34pm UTC](https://forum.ansible.com/t/project-scm-sync-error-on-new-install/32070/1 "2020-01-27T22:34:00Z")

</div>

I have a new install, after creating the project and credential I’m getting the following error when trying to sync. I’ve tried my username/password and private key.

“stderr\_lines”: [  
“Cloning into ‘/var/lib/awx/projects/\_8\_\_automation\_project’…”,  
“fatal: unable to access ‘https://$encrypted$:$encrypted$@github.Fake.com/Automation/Fake.git/’: error:141A318A:SSL routines:tls\_process\_ske\_dhe:dh key too small”  
],

Is there something that needs to be done on the task or web container to poing to my [github.fake.com](http://github.fake.com) URL. By the way this is a private URL its real name isn’t fake.

Thanks

---

<div class="post-metadata">

**Author:** ![matburt](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/matburt/32/3612_2.png) [@matburt](https://forum.ansible.com/u/matburt)\
**Post date:** [January 28, 2020, 12:52pm UTC](https://forum.ansible.com/t/project-scm-sync-error-on-new-install/32070/2 "2020-01-28T12:52:07Z")

</div>

From a quick google search: [https://stackoverflow.com/questions/36417224/openssl-dh-key-too-small-error](https://stackoverflow.com/questions/36417224/openssl-dh-key-too-small-error)

I wouldn’t recommend you disable tls, would probably be better to just generate a better certificate. Otherwise you’ll need to find a way to work around it.

---

<div class="post-metadata">

**Author:** ![dpowell](https://avatars.discourse-cdn.com/v4/letter/d/e95f7d/32.png) [@dpowell](https://forum.ansible.com/u/dpowell)\
**Post date:** [January 29, 2020, 7:42pm UTC](https://forum.ansible.com/t/project-scm-sync-error-on-new-install/32070/3 "2020-01-29T19:42:06Z")

</div>

Was able to work around it but setting SECLEVEL=1 from 2.

/etc/crypto-policies/back-ends/opensslcnf.config

CipherString = @SECLEVEL=1:kEECDH:kRSA:kEDH:kPSK:kDHEPSK:kECDHEPSK:-aDSS:-3DES:!DES:!RC4:!RC2:!IDEA:-SEED:!