SChannel support in Git for Windows
- From
- Robert Labrie <robert.labrie@gmail.com>
- Date
- Jan 15, 2016, 15:04 UTC
- Message-ID
- <CA+1xWaokgVthDv-up76RP+s+r4pSv5ntmePtDVND+rsKuo+-YA@mail.gmail.com>
I googled for this and couldn't find anything, as best as I can tell, it's not a thing.
Increasingly, network admins (including mine) think it's appropriate to intercept TLS handshakes on the firewall, and present the calling application with a self-signed cert for the requested domain (ie github.com). On Linux, this can be sorted out by putting the internal issuing CAs root cert in /etc/certs (or somesuch) and on windows, by importing it into the "Trusted Publishers" certificate store. The challenge comes from apps using OpenSSL on Windows, which doesn't have /etc and doesn't support the windows certificate store.
Presently, I'm using this procedure: http://stackoverflow.com/questions/9072376/configure-git-to-accept-a-particular-self-signed-server-certificate-for-a-partic
But it would be more awesome if git just supported schannel on Windows. I think cURL does already.
Sorry in advance if I didn't Google hard enough for this.
Thanks, Rob