{"thread":{"id":"55365","subject":"How to disable git verification of ssl proxy?","startedAt":"2021-03-22T03:07:41Z","lastAt":"2021-03-26T08:44:22Z","messageCount":2,"participants":["shadewither","Jeff King"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"419901","messageId":"CAKrd5586jDVOSF-aYqqtA=Dt-Qn=zC89MHXkpS=7hNHP779stg@mail.gmail.com","threadId":"55365","inReplyTo":null,"subject":"How to disable git verification of ssl proxy?","fromName":"shadewither","fromEmail":"shdwthr@gmail.com","sentAt":"2021-03-22T03:06:31Z","receivedAt":"2021-03-22T03:07:41Z","isPatch":false,"sender":{"key":"shdwthr@gmail.com","avatar":null},"body":"git version 2.25.1 / Ubuntu 20.04\nhttp.sslverify=false does not work. git insists on verifying ssl proxy\nand complains.\ncurl has an option of --proxy-insecure to disable proxy verification,\nwhat is the equivalent for git?\n\n$ GIT_CURL_VERBOSE=1 git ...\n* Couldn't find host github.com in the .netrc file; using defaults\n*   Trying 127.0.0.1:1088...\n* TCP_NODELAY set\n* Connected to 127.0.0.1 (127.0.0.1) port 1088 (#0)\n* found 391 certificates in /etc/ssl/certs\n* ALPN, offering http/1.1\n* SSL connection using TLS1.3 / ECDHE_RSA_AES_256_GCM_SHA384\n* server certificate verification OK\n* server certificate status verification SKIPPED\n* error fetching CN from cert:The requested data were not available.\n* SSL: certificate subject name () does not match target host name '127.0.0.1'\n* Closing connection 0\nfatal: unable to access 'https://github.com/gdabah/distorm.git/': SSL:\ncertificate subject name () does not match target host name\n'127.0.0.1'\n\n--\nyours,\nshdwthr@gmail.com\n"},{"id":"420244","messageId":"YF2eu7Q8LXUnRCGY@coredump.intra.peff.net","threadId":"55365","inReplyTo":"CAKrd5586jDVOSF-aYqqtA=Dt-Qn=zC89MHXkpS=7hNHP779stg@mail.gmail.com","subject":"Re: How to disable git verification of ssl proxy?","fromName":"Jeff King","fromEmail":"peff@peff.net","sentAt":"2021-03-26T08:43:39Z","receivedAt":"2021-03-26T08:44:22Z","isPatch":false,"sender":{"key":"peff@peff.net","avatar":"https://avatars.githubusercontent.com/u/45925?v=4"},"body":"On Mon, Mar 22, 2021 at 11:06:31AM +0800, shadewither wrote:\n\n> git version 2.25.1 / Ubuntu 20.04\n> http.sslverify=false does not work. git insists on verifying ssl proxy\n> and complains.\n> curl has an option of --proxy-insecure to disable proxy verification,\n> what is the equivalent for git?\n\nI don't think there is one. Peeking at the curl source code,\n--proxy-insecure is setting CURLOPT_PROXY_SSL_VERIFYPEER and\nCURLOPT_PROXY_SSL_VERIFYHOST both to 0.\n\nSo I think we'd need to plumb through an http.proxysslverify option that\nis equivalent to http.sslverify, but using the PROXY variants with\ncurl_easy_setopt().\n\n-Peff\n"}]}