# Re: git: handling HTTPS proxy w/ password inappropriately

2 messages from 2018-02-05 to 2018-02-05. Participants: Jonathan Nieder, Yangfl.
Thread: https://gitlist.dev/t/47759

## Jonathan Nieder, 2018-02-05 17:55

Subject: Re: git: handling HTTPS proxy w/ password inappropriately
Message-ID: <20180205175500.GA104086@aiede.svl.corp.google.com>
URL: https://gitlist.dev/e/20180205175500.GA104086%40aiede.svl.corp.google.com
In-Reply-To: <handler.873424.D873424.151784496817038.ackdone@bugs.debian.org>

```
Hi,

Yangfl <mmyangfl@gmail.com> wrote[1]:

> not affected any more

Can you say a little more about this?  Do you mean that newer versions
of Git are working better for you or that your proxy setup changed?

This looks similar to
https://public-inbox.org/git/CAHnnmh6QCnHTycbMDLjfFYoXW4dErTZoTHsPrkYdhZKnXcHHYQ@mail.gmail.com/
to me, which makes me fear it hasn't been fixed.

Thanks,
Jonathan

[1] http://bugs.debian.org/873424

```

## Yangfl, 2018-02-05 18:16

Subject: Re: git: handling HTTPS proxy w/ password inappropriately
Message-ID: <CAAXyoMN_DYHO0BX1fn+97+GPPPFLGya3nCi4SEvDJDRL3-6=dA@mail.gmail.com>
URL: https://gitlist.dev/e/CAAXyoMN_DYHO0BX1fn%2B97%2BGPPPFLGya3nCi4SEvDJDRL3-6%3DdA%40mail.gmail.com
In-Reply-To: <20180205175500.GA104086@aiede.svl.corp.google.com>

```
2018-02-06 1:55 GMT+08:00 Jonathan Nieder <jrnieder@gmail.com>:
> Hi,
>
> Yangfl <mmyangfl@gmail.com> wrote[1]:
>
>> not affected any more
>
> Can you say a little more about this?  Do you mean that newer versions
> of Git are working better for you or that your proxy setup changed?
>
> This looks similar to
> https://public-inbox.org/git/CAHnnmh6QCnHTycbMDLjfFYoXW4dErTZoTHsPrkYdhZKnXcHHYQ@mail.gmail.com/
> to me, which makes me fear it hasn't been fixed.
>
> Thanks,
> Jonathan
>
> [1] http://bugs.debian.org/873424

I just repeated it three times to make sure it works perfectly.
However, I still see 2 connection attempts in my wireshark, the first
one without password (then FINed), and the following one with.

$ git --version
git version 2.15.1

Versions of packages git depends on:
ii  git-man          1:2.15.1-3
ii  libc6            2.26-4
ii  libcurl3-gnutls  7.58.0-2
ii  liberror-perl    0.17025-1
ii  libexpat1        2.2.5-3
ii  libpcre2-8-0     10.22-5
ii  perl             5.26.1-4
ii  zlib1g           1:1.2.8.dfsg-5

Versions of packages git recommends:
ii  less                         487-0.1
ii  openssh-client [ssh-client]  1:7.6p1-3
ii  patch                        2.7.5-1+b2

Versions of packages git suggests:
ii  gettext-base                          0.19.8.1-4
pn  git-cvs                               <none>
pn  git-daemon-run | git-daemon-sysvinit  <none>
pn  git-doc                               <none>
pn  git-el                                <none>
pn  git-email                             <none>
pn  git-gui                               <none>
pn  git-mediawiki                         <none>
pn  git-svn                               <none>
pn  gitk                                  <none>
pn  gitweb                                <none>

```