From: Andreas Krey <a.krey@gmx.de>
Date: Wed, 13 Jan 2010 14:12:18 GMT
Subject: Re: [RFC 0/2] Git-over-TLS (gits://) client side support
Message-ID: <20100113141218.GA17687@inner.home.ulmdo.de>
In-Reply-To: <20100113135753.GA7095@Knoppix>

On Wed, 13 Jan 2010 15:57:53 +0000, Ilari Liusvaara wrote:
...
> And one would need custom daemon anyway even if one used stunnel. 
> git-daemon just can't deal with authentication data.

It doesn't need to, really. stunnel sets the environment variable
SSL_CLIENT_DN with the distinguished name of the client certificate,
which can be used in the hook scripts ('update') on the server.

(I looked into that stuff once, but with the advent of smart-http(s)
I pretty much lost any interest to try implementing gits:// via
openssl here, as it isn't yet an actual itch.)

Andreas