git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: git and SSL certificates

From
Shawn Pearce <spearce@spearce.org>
Date
Feb 24, 2012, 19:27 UTC
Message-ID
<CAJo=hJuyHv_L_zajW-MWEj6fDGggrVDkRWT32mD5TBzD_GzReQ@mail.gmail.com>
In-Reply-To
<000501ccf328$1efe1070$5cfa3150$@nedharvey.com>
On Fri, Feb 24, 2012 at 11:11, Edward Ned Harvey <git@nedharvey.com> wrote:
Show 8 quoted lines
> I have a git server hosted on https (github enterprise virtual appliance),
> using a valid signed cert from startcom, which passes all the SSL checks for
> any browser I use on any OS (IE, Firefox, Safari, Chrome, on Ubuntu, Mac
> OSX, MS Win7) but when I connect to it using git, git complains about the
> cert, but it's platform dependent, and it doesn't seem to make any sense...
> Does git have its own set of SSL trusted root CA's compiled in at build time
> or something?  It seems weird that it's apparently not using the trusted
> root CA's from the OS...

Nope. Git uses the system's libcurl, which is probably using the system's libssl or libgnutls, which is using the system's certificates.

Previous: Edward Ned HarveyNext: Edward Ned Harvey
Message 2 of 3 in “git and SSL certificates”
  1. Edward Ned HarveyFeb 24, 2012
  2. Shawn PearceFeb 24, 2012
  3. Edward Ned HarveyFeb 24, 2012

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.