Re: Multiple GIT Accounts & HTTPS Client Certificates - Config

From: brian m. carlson <sandals@crustytoothpaste.net>
Date: Sep 13, 2018, 04:17 UTC
Message-ID: <20180913041708.GT432229@genre.crustytoothpaste.net>
In-Reply-To: <CAPO0KtU5YHtuTEzSAZ8sbtuUuZ_0EV4_LyQdWcDJgH6N05TN+g@mail.gmail.com>

On Tue, Sep 11, 2018 at 09:42:35AM +0200, Sergei Haller wrote:

Show 12 quoted lines

> PS: while I was trying to send the mail to this mailing list, there is
> some update from the stack overflow side:
> 
> * I am using sslBackend schannel
> * the private key of my client certificate can be provided by using
> the http.sslKey config option
> * the private key is on a smart card, so there is no way I can copy it
> over to a file and use the openssl backend (at least no way that I am
> aware of :)
> 
> so basically this pins down to the fact that schannel implementation
> is picking the wrong key.

Git doesn't provide an option to query a smartcard outside of what your typical TLS implementation provides by default. Not being a Windows user, I don't know if Schannel provides a way to automatically select the right private key based on which certificate is used, or if that's outside its capability.

> PS: the recent realization makes me believe this is a window specific
> problem. I think I have read somewhere
> about a separate windows mailing list (but not sure where I saw it)

If you're talking about Git for Windows, yes, this is probably better addressed as an issue there: https://github.com/git-for-windows/git.

-- 
brian m. carlson: Houston, Texas, US
OpenPGP: https://keybase.io/bk2204