git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: Cygwin git with schannel ("native Windows Secure Channel library")

From
Beat Bolli <dev+git@drbeat.li>
Date
Dec 21, 2019, 11:50 UTC
Message-ID
<236e2b6b-d1ce-b0f2-ff56-4ca5e0dfb8e8@drbeat.li>
In-Reply-To
<20191220231840.GD163225@camp.crustytoothpaste.net>
On 21.12.19 00:18, brian m. carlson wrote:
Show 32 quoted lines
> On 2019-12-20 at 01:52:04, Keith Thompson wrote:
>> I've posted this on Stack Overflow
>> https://stackoverflow.com/q/59381061/827263
>> but I haven't gotten any responses yet.
>>
>> When I install "Git for Windows" on Windows 10, the installation
>> wizard offers the choice of using either the OpenSSL library or the
>> "native Windows Secure Channel library".  (Whether that's offered
>> seems to depend on what's available on the Windows 10 system.)
>> I believe this is referred to in the git sources as "schannel".
>>
>> Is there a way to configure git under Cygwin to use the native
>> Windows Secure Channel library?  An ideal solution would be a
>> modification to my .gitconfig, but something that lets me build git
>> (and possibly curl) from source would also be good.  See my Stack
>> Overflow question for more details, including some things that I
>> tried that didn't work.
>>
>> The problem I'm trying to solve: In my work environment, I can
>> use Cygwin git for local operations, but I have to use Windows git
>> for anything that talks to a remote (push, pull).I'd prefer to use
>> Cygwin git exclusively.
> 
> I'm not 100% certain here, but I believe the answer is no.  In order to
> use SChannel, you'll need to link against MSVCRT or a compatible
> runtime, but it's not possible to link against both that and Cygwin at
> the same time (probably because they both provide the same symbols).
> 
> If your constraint is that you need to interact with the Windows
> certificate store or such, you could see if there's an OpenSSL or GnuTLS
> plugin that will do that for you and then build against that library or
> plugin.

There is the OpenSSL "CAPI" engine which interfaces with the Windows CryptoAPI. However, I don't know if the Cygwin OpenSSL build includes this engine.

Cheers, Beat
Previous: brian m. carlsonNext: Keith Thompson
Message 3 of 4 in “Cygwin git with schannel ("native Windows Secure Channel library")”
  1. Keith ThompsonDec 20, 2019
  2. brian m. carlsonDec 20, 2019
  3. Beat BolliDec 21, 2019
  4. Keith ThompsonDec 21, 2019

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.