git/list[1] front-page[2] threads[3] people[4] search[5] about
 

RE: git and SSL certificates

From
EHEdward Ned Harvey <git@nedharvey.com>
Date
Feb 24, 2012, 20:01 UTC
Message-ID
<000801ccf32f$2448e030$6cdaa090$@nedharvey.com>
In-Reply-To
<CAJo=hJuyHv_L_zajW-MWEj6fDGggrVDkRWT32mD5TBzD_GzReQ@mail.gmail.com>
Show 6 quoted lines
> From: Shawn Pearce [mailto:spearce@spearce.org]
> Sent: Friday, February 24, 2012 2:27 PM
>
> Nope. Git uses the system's libcurl, which is probably using the
> system's libssl or libgnutls, which is using the system's
> certificates.

Thanks, this gives me more fuel to go on, because now I know I can reproduce the problem using any other tool I want - curl for example. Where I'm able to specify -v for verbose, and get its cert search path.

It's still really bizarre, because the Startcom root CA is indeed present in the search path, and it is indeed the same root CA that was used to sign my server cert. So now I'll go ask startcom what they think about it...

If anyone is interested, please say so, and I'll report back here. Otherwise, I'll probably just let the thread die.

Previous: Shawn Pearce
Message 3 of 3 in “git and SSL certificates”
  1. Edward Ned HarveyFeb 24, 2012
  2. Shawn PearceFeb 24, 2012
  3. Edward Ned HarveyFeb 24, 2012

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.