diff options
| author | Andrew Carter <andrew@emailcarter.com> | 2025-02-04 23:38:56 -0600 |
|---|---|---|
| committer | Junio C Hamano <gitster@pobox.com> | 2025-02-05 09:43:38 -0800 |
| commit | 3eeed876a909c45695f2f3a3edd4141be331a3be (patch) | |
| tree | deff8cb35e4d98ff13fc56aad62673ece95b5528 | |
| parent | Git 2.46.3 (diff) | |
| download | git-3eeed876a909c45695f2f3a3edd4141be331a3be.tar.gz git-3eeed876a909c45695f2f3a3edd4141be331a3be.zip | |
docs: indicate http.sslCertType and sslKeyType
0a01d41ee4 (http: add support for different sslcert and sslkey types.,
2023-03-20) added useful SSL config options, but did not document them.
Signed-off-by: Andrew Carter <andrew@emailcarter.com>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
| -rw-r--r-- | Documentation/config/http.txt | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/Documentation/config/http.txt b/Documentation/config/http.txt index 162b33fc52..ed11ddcd02 100644 --- a/Documentation/config/http.txt +++ b/Documentation/config/http.txt @@ -216,6 +216,21 @@ http.sslBackend:: This option is ignored if cURL lacks support for choosing the SSL backend at runtime. +http.sslCertType:: + Type of client certificate used when fetching or pushing over HTTPS. + "PEM", "DER" are supported when using openssl or gnutls backends. "P12" + is supported on "openssl", "schannel", "securetransport", and gnutls 8.11+. + See also libcurl `CURLOPT_SSLCERTTYPE`. Can be overridden by the + `GIT_SSL_CERT_TYPE` environment variable. + +http.sslKeyType:: + Type of client private key used when fetching or pushing over HTTPS. (e.g. + "PEM", "DER", or "ENG"). Only applicable when using "openssl" backend. "DER" + is not supported with openssl. Particularly useful when set to "ENG" for + authenticating with PKCS#11 tokens, with a PKCS#11 URL in sslCert option. + See also libcurl `CURLOPT_SSLKEYTYPE`. Can be overridden by the + `GIT_SSL_KEY_TYPE` environment variable. + http.schannelCheckRevoke:: Used to enforce or disable certificate revocation checks in cURL when http.sslBackend is set to "schannel". Defaults to `true` if |