# How to disable git verification of ssl proxy? 2 messages from 2021-03-22 to 2021-03-26. Participants: shadewither, Jeff King. Thread: https://gitlist.dev/t/55365 ## shadewither, 2021-03-22 03:06 Subject: How to disable git verification of ssl proxy? Message-ID: URL: https://gitlist.dev/e/CAKrd5586jDVOSF-aYqqtA%3DDt-Qn%3DzC89MHXkpS%3D7hNHP779stg%40mail.gmail.com ``` git version 2.25.1 / Ubuntu 20.04 http.sslverify=false does not work. git insists on verifying ssl proxy and complains. curl has an option of --proxy-insecure to disable proxy verification, what is the equivalent for git? $ GIT_CURL_VERBOSE=1 git ... * Couldn't find host github.com in the .netrc file; using defaults * Trying 127.0.0.1:1088... * TCP_NODELAY set * Connected to 127.0.0.1 (127.0.0.1) port 1088 (#0) * found 391 certificates in /etc/ssl/certs * ALPN, offering http/1.1 * SSL connection using TLS1.3 / ECDHE_RSA_AES_256_GCM_SHA384 * server certificate verification OK * server certificate status verification SKIPPED * error fetching CN from cert:The requested data were not available. * SSL: certificate subject name () does not match target host name '127.0.0.1' * Closing connection 0 fatal: unable to access 'https://github.com/gdabah/distorm.git/': SSL: certificate subject name () does not match target host name '127.0.0.1' -- yours, shdwthr@gmail.com ``` ## Jeff King, 2021-03-26 08:43 Subject: Re: How to disable git verification of ssl proxy? Message-ID: URL: https://gitlist.dev/e/YF2eu7Q8LXUnRCGY%40coredump.intra.peff.net In-Reply-To: ``` On Mon, Mar 22, 2021 at 11:06:31AM +0800, shadewither wrote: > git version 2.25.1 / Ubuntu 20.04 > http.sslverify=false does not work. git insists on verifying ssl proxy > and complains. > curl has an option of --proxy-insecure to disable proxy verification, > what is the equivalent for git? I don't think there is one. Peeking at the curl source code, --proxy-insecure is setting CURLOPT_PROXY_SSL_VERIFYPEER and CURLOPT_PROXY_SSL_VERIFYHOST both to 0. So I think we'd need to plumb through an http.proxysslverify option that is equivalent to http.sslverify, but using the PROXY variants with curl_easy_setopt(). -Peff ```