From: Ilari Liusvaara <ilari.liusvaara@elisanet.fi>
Date: Tue, 29 Jun 2010 00:46:31 GMT
Subject: Re: git access using SSL certificates
Message-ID: <20100629004631.GA14854@LK-Perkele-V2.elisa-laajakaista.fi>
In-Reply-To: <6E28EE29-0FFA-4467-AE10-76ED2AEF79A5@uab.edu>

On Mon, Jun 28, 2010 at 05:39:03PM -0500, Shantanu Pavgi wrote:
> 
> Tried with Git 1.7.1 on Mac: Doesn't work, same error. 
> Tried from another CentOS box with Git 1.7.1 and it worked fine. 
> 
> In all failed cases apache logs indicate: <timestamp> [error] Re-negotiation
> request failed. 
 
Renegotiation failed? There has been TLS security hole regarding to
renegotiation, and many patched TLS implementations do not allow renegotiation
unless the other side is patched too.

Maybe only one of the sides is patched? Both should be patched. One way to
find out if server is patched is to connect with client (e.g. Gnutls 2.10)
that supports safe renegotiation and disallow connecting to unpatched servers
and see if it connects or not.

-Ilari