Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add HTTPS proxy SSL options (cert, key, cainfo) #559

Closed

Commits on Mar 4, 2020

  1. http: add client cert for HTTPS proxies.

    Git currently supports performing connections to HTTPS proxies but we
    don't support doing mutual authentication with them (through TLS). This
    commit adds the necessary options to be able to send a client
    certificate to the HTTPS proxy.
    
    A client certificate can provide an alternative way of authentication
    instead of using 'ProxyAuthorization' or other more common methods of
    authentication.  Libcurl supports this functionality already so changes
    are somewhat minimal. The feature is guarded by the first available
    libcurl version that supports these options.
    
    4 configuration options are added and documented, cert, key, cert
    password protected and CA info. The CA info should be used to specify a
    different CA path to validate the HTTPS proxy cert.
    
    Signed-off-by: Jorge Lopez Silva <jalopezsilva@gmail.com>
    jalopezsilva committed Mar 4, 2020
    Copy the full SHA
    e18b342 View commit details
    Browse the repository at this point in the history
  2. http: add environment variable for HTTPS proxy.

    This commit adds four environment variables that can be used to
    configure the proxy cert, proxy ssl key, the proxy cert password
    protected flag, and the CA info for the proxy.
    
    Documentation for the options was also updated.
    
    Signed-off-by: Jorge Lopez Silva <jalopezsilva@gmail.com>
    jalopezsilva committed Mar 4, 2020
    Copy the full SHA
    086c5e5 View commit details
    Browse the repository at this point in the history