{"thread":{"id":"15985","subject":"How to push to http(s) repository with authentication?","startedAt":"2008-10-20T18:25:02Z","lastAt":"2008-10-23T22:32:56Z","messageCount":4,"participants":["Josef Wolf","Alex Riesen"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"93542","messageId":"20081020182502.GH9707@raven.wolf.lan","threadId":"15985","inReplyTo":null,"subject":"How to push to http(s) repository with authentication?","fromName":"Josef Wolf","fromEmail":"jw@raven.inka.de","sentAt":"2008-10-20T18:25:02Z","receivedAt":"2008-10-20T18:25:02Z","isPatch":false,"sender":{"key":"jw@raven.inka.de","avatar":null},"body":"Hello,\n\nI have set up a repository as described in\n\n  http://www.kernel.org/pub/software/scm/git/docs/howto/setup-git-server-over-http.txt\n\nover SSL with basic authentication.  DAV access works fine with konqueror,\ncadaver and and curl, using this .curlrc:\n\n   $ cat ~/.curlrc\n   --cacert /etc/cacerts/myca.pem\n   --user   user\n   $ curl https://repo.host.org/git/test/HEAD\n   Enter host password for user 'user':\n   ref: refs/heads/master\n   $\n\nBut when called from git, this file seems to be ignored.  I have checked\ngoogle, but the only hint I could find was to put credentials into\n~/.netrc.  IMHO, this is a bad workaround, since this implies to have\nunencrypted passwords lying around on the disk.\n\nAny hints?\n\nPS: I have asked a similar question a couple of days ago.  Here is a link\n    to my original mail with more information how I set up the server:\n\n      http://marc.info/?l=git&m=122426078301793&w=2\n"},{"id":"93795","messageId":"20081023175336.GA3526@raven.wolf.lan","threadId":"15985","inReplyTo":"20081020182502.GH9707@raven.wolf.lan","subject":"Re: How to push to http(s) repository with authentication?","fromName":"Josef Wolf","fromEmail":"jw@raven.inka.de","sentAt":"2008-10-23T17:53:37Z","receivedAt":"2008-10-23T17:53:37Z","isPatch":false,"sender":{"key":"jw@raven.inka.de","avatar":null},"body":"On Mon, Oct 20, 2008 at 08:25:02PM +0200, Josef Wolf wrote:\n\n> I have set up a repository as described in\n> \n>   http://www.kernel.org/pub/software/scm/git/docs/howto/setup-git-server-over-http.txt\n> \n> over SSL with basic authentication.  DAV access works fine with konqueror,\n> cadaver and and curl, using this .curlrc:\n> [ ... ]\n\nIs nobody interested in this topic?  Or am I in the wrong list?\n"},{"id":"93799","messageId":"20081023190544.GA21079@blimp.localdomain","threadId":"15985","inReplyTo":"20081023175336.GA3526@raven.wolf.lan","subject":"Re: How to push to http(s) repository with authentication?","fromName":"Alex Riesen","fromEmail":"raa.lkml@gmail.com","sentAt":"2008-10-23T19:05:44Z","receivedAt":"2008-10-23T19:05:44Z","isPatch":false,"sender":{"key":"raa.lkml@gmail.com","avatar":"https://avatars.githubusercontent.com/u/324101?v=4"},"body":"Josef Wolf, Thu, Oct 23, 2008 19:53:37 +0200:\n> On Mon, Oct 20, 2008 at 08:25:02PM +0200, Josef Wolf wrote:\n> \n> > I have set up a repository as described in\n> > \n> >   http://www.kernel.org/pub/software/scm/git/docs/howto/setup-git-server-over-http.txt\n> > \n> > over SSL with basic authentication.  DAV access works fine with konqueror,\n> > cadaver and and curl, using this .curlrc:\n> > [ ... ]\n> \n> Is nobody interested in this topic?  Or am I in the wrong list?\n\n       --cacert <CA certificate>\n              (SSL) Tells curl to use the specified certificate file to verify\n              the peer. The file may contain  multiple  CA  certificates.  The\n              certificate(s) must be in PEM format.\n\n              curl  recognizes the environment variable named ’CURL_CA_BUNDLE’\n              if that is set, and uses the given path as a path to a  CA  cert\n              bundle. This option overrides that variable.\n\n              The  windows  version  of  curl will automatically look for a CA\n              certs file named ´curl-ca-bundle.crt´, either in the same direc‐\n              tory as curl.exe, or in the Current Working Directory, or in any\n              folder along your PATH.\n\n              If curl is built against the NSS SSL library  then  this  option\n              tells  curl the nickname of the CA certificate to use within the\n              NSS database defined by the environment variable SSL_DIR (or  by\n              default  /etc/pki/nssdb).   If  the NSS PEM PKCS#11 module (lib‐\n              nsspem.so) is available then PEM files may be loaded.\n\n              If this option is used several times, the last one will be used.\n\nDoes this (setting $CURL_CA_BUNDLE) help?\n"},{"id":"93808","messageId":"20081023223256.GB3526@raven.wolf.lan","threadId":"15985","inReplyTo":"20081023190544.GA21079@blimp.localdomain","subject":"Re: How to push to http(s) repository with authentication?","fromName":"Josef Wolf","fromEmail":"jw@raven.inka.de","sentAt":"2008-10-23T22:32:56Z","receivedAt":"2008-10-23T22:32:56Z","isPatch":false,"sender":{"key":"jw@raven.inka.de","avatar":null},"body":"On Thu, Oct 23, 2008 at 09:05:44PM +0200, Alex Riesen wrote:\n\nThanks for your response, Alex!\n\n[ ... ]\n>        --cacert <CA certificate>\n[ ... ]\n\n> Does this (setting $CURL_CA_BUNDLE) help?\n\nWell, as I wrote in my original mail, I already got the certificate\nworking.  My problem is the usage of the .netrc file.  I don't want\nto store passwords in cleartext in files.\n\nSo the real question is: how do I make git-http to ask for credentials.\n\nSorry, I should have made more clearly what's the problem.\n"}]}