Add CACert.org certificate to `mingw64/ssl/certs/ca-bundle.crt`

[koppor]

I am using an SSL certificate created by the CACert.org system. After upgrading from git 1.9.x to 2.5.0 (and 2.5.3), a connection to my server stops with

SSL certificate problem: unable to get local issuer certificate

An ack for the first line of the certificate (MIIHPTCCBSWgAwIBAgIBADANBgkqhkiG9w0BAQQFADB5MRAwDgYDVQQKEwdSb290) at C:\Program Files\Git reveals multiple files. I know that I can disable SSL verification, but that is not a real solution is it?

[ErwinHamann]

I'm not sure, but I think you got the same problem I already had.
Please see at Git for Windows Mailing List -> "15 certificate files at Git program folder needed?"
https://groups.google.com/forum/#!topic/git-for-windows/mlqn5J4OLlw

I think, the certificate file you have to handle is found via git config -l

[koppor]

Oh, yes, it really is http.sslcainfo=C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt. And there, the CACert.org certificate is missing. Thus, I propose to add it there, too. (See msysgit/msysgit#37 for the discussion in the context of msysgit)

[dscho]

@koppor

[dscho]

Umm... @koppor ... you there?

[koppor]

Yeah, I'm here. Forked git and now searching for ca-bundle.crt, but nothing found. Now trying to understand the build process.

[dscho]

Now trying to understand the build process.

Most important resource: https://github.com/git-for-windows/git/wiki (about the general setup), followed by https://github.com/git-for-windows/git/wiki/Package-management and then https://github.com/git-for-windows/git/wiki/Making-an-installer.

For you, https://github.com/git-for-windows/git/wiki/Package-management#list-packages should be particularly interesting.

[koppor]

I didn't find time and it won't look better the next weeks. To reduce the number of open issues, I'll close this one. Maybe someone else will take over. I posted a pointer to this issue it at the @CAcertOrg mailing list.