git/list[1] front-page[2] threads[3] people[4] search[5] about
 

SChannel support in Git for Windows

From
RLRobert Labrie <robert.labrie@gmail.com>
Date
Jan 15, 2016, 15:04 UTC
Message-ID
<CA+1xWaokgVthDv-up76RP+s+r4pSv5ntmePtDVND+rsKuo+-YA@mail.gmail.com>

I googled for this and couldn't find anything, as best as I can tell, it's not a thing.

Increasingly, network admins (including mine) think it's appropriate to intercept TLS handshakes on the firewall, and present the calling application with a self-signed cert for the requested domain (ie github.com). On Linux, this can be sorted out by putting the internal issuing CAs root cert in /etc/certs (or somesuch) and on windows, by importing it into the "Trusted Publishers" certificate store. The challenge comes from apps using OpenSSL on Windows, which doesn't have /etc and doesn't support the windows certificate store.

Presently, I'm using this procedure: http://stackoverflow.com/questions/9072376/configure-git-to-accept-a-particular-self-signed-server-certificate-for-a-partic

But it would be more awesome if git just supported schannel on Windows. I think cURL does already.

Sorry in advance if I didn't Google hard enough for this.

Thanks, Rob

Next: Daniel Stenberg
Message 1 of 6 in “SChannel support in Git for Windows”
  1. Robert LabrieJan 15, 2016
  2. Daniel StenbergJan 15, 2016
  3. Johannes SchindelinJan 15, 2016
  4. Konstantin KhomoutovJan 15, 2016
  5. Robert LabrieJan 15, 2016
  6. Konstantin KhomoutovJan 15, 2016

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.