mirrors/git
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

docs: indicate http.sslCertType and sslKeyType

Browse Source 
0a01d41ee4 (http: add support for different sslcert and sslkey types.,
2023-03-20) added useful SSL config options, but did not document them.

Signed-off-by: Andrew Carter <andrew@emailcarter.com>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
This commit is contained in:
Andrew Carter
2025-02-04 23:38:56 -06:00
committed by Junio C Hamano
parent 5c21db3a0d
commit 3eeed876a9
1 changed files with 15 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
Documentation/config/http.txt
View File

@ -216,6 +216,21 @@ http.sslBackend::
This option is ignored if cURL lacks support for choosing the SSL This option is ignored if cURL lacks support for choosing the SSL
backend at runtime. backend at runtime.
http.sslCertType::
Type of client certificate used when fetching or pushing over HTTPS.
"PEM", "DER" are supported when using openssl or gnutls backends. "P12"
is supported on "openssl", "schannel", "securetransport", and gnutls 8.11+.
See also libcurl `CURLOPT_SSLCERTTYPE`. Can be overridden by the
`GIT_SSL_CERT_TYPE` environment variable.
http.sslKeyType::
Type of client private key used when fetching or pushing over HTTPS. (e.g.
"PEM", "DER", or "ENG"). Only applicable when using "openssl" backend. "DER"
is not supported with openssl. Particularly useful when set to "ENG" for
authenticating with PKCS#11 tokens, with a PKCS#11 URL in sslCert option.
See also libcurl `CURLOPT_SSLKEYTYPE`. Can be overridden by the
`GIT_SSL_KEY_TYPE` environment variable.
http.schannelCheckRevoke:: http.schannelCheckRevoke::
Used to enforce or disable certificate revocation checks in cURL Used to enforce or disable certificate revocation checks in cURL
when http.sslBackend is set to "schannel". Defaults to `true` if when http.sslBackend is set to "schannel". Defaults to `true` if