git@vger.kernel.org list mirror (unofficial, one of many)
 help / color / mirror / code / Atom feed
* How to disable git verification of ssl proxy?
@ 2021-03-22  3:06 shadewither
  2021-03-26  8:43 ` Jeff King
  0 siblings, 1 reply; 2+ messages in thread
From: shadewither @ 2021-03-22  3:06 UTC (permalink / raw)
  To: git

git version 2.25.1 / Ubuntu 20.04
http.sslverify=false does not work. git insists on verifying ssl proxy
and complains.
curl has an option of --proxy-insecure to disable proxy verification,
what is the equivalent for git?

$ GIT_CURL_VERBOSE=1 git ...
* Couldn't find host github.com in the .netrc file; using defaults
*   Trying 127.0.0.1:1088...
* TCP_NODELAY set
* Connected to 127.0.0.1 (127.0.0.1) port 1088 (#0)
* found 391 certificates in /etc/ssl/certs
* ALPN, offering http/1.1
* SSL connection using TLS1.3 / ECDHE_RSA_AES_256_GCM_SHA384
* server certificate verification OK
* server certificate status verification SKIPPED
* error fetching CN from cert:The requested data were not available.
* SSL: certificate subject name () does not match target host name '127.0.0.1'
* Closing connection 0
fatal: unable to access 'https://github.com/gdabah/distorm.git/': SSL:
certificate subject name () does not match target host name
'127.0.0.1'

--
yours,
shdwthr@gmail.com

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: How to disable git verification of ssl proxy?
  2021-03-22  3:06 How to disable git verification of ssl proxy? shadewither
@ 2021-03-26  8:43 ` Jeff King
  0 siblings, 0 replies; 2+ messages in thread
From: Jeff King @ 2021-03-26  8:43 UTC (permalink / raw)
  To: shadewither; +Cc: git

On Mon, Mar 22, 2021 at 11:06:31AM +0800, shadewither wrote:

> git version 2.25.1 / Ubuntu 20.04
> http.sslverify=false does not work. git insists on verifying ssl proxy
> and complains.
> curl has an option of --proxy-insecure to disable proxy verification,
> what is the equivalent for git?

I don't think there is one. Peeking at the curl source code,
--proxy-insecure is setting CURLOPT_PROXY_SSL_VERIFYPEER and
CURLOPT_PROXY_SSL_VERIFYHOST both to 0.

So I think we'd need to plumb through an http.proxysslverify option that
is equivalent to http.sslverify, but using the PROXY variants with
curl_easy_setopt().

-Peff

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2021-03-26  8:44 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-03-22  3:06 How to disable git verification of ssl proxy? shadewither
2021-03-26  8:43 ` Jeff King

Code repositories for project(s) associated with this inbox:

	https://80x24.org/mirrors/git.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).