Re: git:// protocol over SSL/TLS

From: Ilari Liusvaara <ilari.liusvaara@elisanet.fi>
Date: Dec 28, 2013, 20:00 UTC
Message-ID: <20131228200007.GA13655@LK-Perkele-VII>
In-Reply-To: <7viouaj5p0.fsf@alter.siamese.dyndns.org>

On Fri, Dec 27, 2013 at 02:21:31PM -0800, Junio C Hamano wrote:

Show 12 quoted lines

> Konstantin Khomoutov <flatworm@users.sourceforge.net> writes:
> >
> > The Git protocol does not implement it itself but you can channel it
> > over a TLS tunnel (via stunnel for instance).  Unfortunately, this
> > means a specialized software and setup on both ends so if the question
> > was about a general client using stock Git then the answer is no, it's
> > impossible.
> 
> Hmph, I somehow had an impression that you wouldn't need anything
> more complex than a simple helper that uses git-remote-ext on the
> client side. On the remote end, you'd need to have something that
> terminates the incoming SSL/TLS and plugs it to your git daemon.

If you have some tool that can do cleartext I/O from stdin/stdout and establishes ciphertext connection itself, you can use it with git-remote-ext. It was written for cases exactly like that.

To do git:// inside, use the %G pseudo-argument.

-Ilari