From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/77819 Path: news.gmane.org!not-for-mail From: Ted Zlatanov Newsgroups: gmane.emacs.gnus.general Subject: Re: SSL certificate issues for git.gnus.org Date: Wed, 16 Mar 2011 08:21:21 -0500 Organization: =?utf-8?B?0KLQtdC+0LTQvtGAINCX0LvQsNGC0LDQvdC+0LI=?= @ Cienfuegos Message-ID: <87zkovxktq.fsf@lifelogs.com> References: <87sk71o198.fsf@lifelogs.com> <8762s7n3gq.fsf@topper.koldfront.dk> <87fwrb67zq.fsf@lifelogs.com> <87wrknlnz4.fsf@topper.koldfront.dk> <8739n80x9j.fsf@lifelogs.com> <871v2rg9g4.fsf@dod.no> <87wrkj15yb.fsf@lifelogs.com> <87bp1m3kpx.fsf@lifelogs.com> <87lj0ne2cq.fsf@latte.josefsson.org> <877hc663xo.fsf@latte.josefsson.org> <87sjuuiqj0.fsf@lifelogs.com> <87lj0mfbca.fsf@latte.josefsson.org> <87y64i2i3e.fsf@latte.josefsson.org> <87tyf42wwr.fsf@lifelogs.com> <87pqpr49go.fsf@lifelogs.com> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: dough.gmane.org 1300281743 23474 80.91.229.12 (16 Mar 2011 13:22:23 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Wed, 16 Mar 2011 13:22:23 +0000 (UTC) To: ding@gnus.org Original-X-From: ding-owner+M26139@lists.math.uh.edu Wed Mar 16 14:22:20 2011 Return-path: Envelope-to: ding-account@gmane.org Original-Received: from util0.math.uh.edu ([129.7.128.18]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Pzqg7-0000P1-C2 for ding-account@gmane.org; Wed, 16 Mar 2011 14:22:19 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by util0.math.uh.edu with smtp (Exim 4.63) (envelope-from ) id 1PzqfX-00011K-4t; Wed, 16 Mar 2011 08:21:43 -0500 Original-Received: from mx1.math.uh.edu ([129.7.128.32]) by util0.math.uh.edu with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1PzqfV-000114-Ju for ding@lists.math.uh.edu; Wed, 16 Mar 2011 08:21:41 -0500 Original-Received: from quimby.gnus.org ([80.91.231.51]) by mx1.math.uh.edu with esmtp (Exim 4.72) (envelope-from ) id 1PzqfR-0003v0-EP for ding@lists.math.uh.edu; Wed, 16 Mar 2011 08:21:41 -0500 Original-Received: from lo.gmane.org ([80.91.229.12]) by quimby.gnus.org with esmtp (Exim 4.72) (envelope-from ) id 1PzqfP-0005KY-6x for ding@gnus.org; Wed, 16 Mar 2011 14:21:35 +0100 Original-Received: from list by lo.gmane.org with local (Exim 4.69) (envelope-from ) id 1PzqfN-0008Ow-8o for ding@gnus.org; Wed, 16 Mar 2011 14:21:33 +0100 Original-Received: from 38.98.147.130 ([38.98.147.130]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 16 Mar 2011 14:21:33 +0100 Original-Received: from tzz by 38.98.147.130 with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 16 Mar 2011 14:21:33 +0100 X-Injected-Via-Gmane: http://gmane.org/ Original-Lines: 23 Original-X-Complaints-To: usenet@dough.gmane.org X-Gmane-NNTP-Posting-Host: 38.98.147.130 X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6;d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" User-Agent: Gnus/5.110014 (No Gnus v0.14) Emacs/24.0.50 (gnu/linux) Cancel-Lock: sha1:5lveV3uuJZo69eqK9rgyci/aVyM= X-Spam-Score: -0.7 (/) List-ID: Precedence: bulk Xref: news.gmane.org gmane.emacs.gnus.general:77819 Archived-At: On Wed, 16 Mar 2011 07:31:35 -0400 Greg Troxel wrote: GT> I changed .git/config to edit remote to https for git.gnus.org, and then GT> got a cert failure. I then installed the cacert root ca in GT> /etc/openssl/certs (NetBSD), and git remote update now prompts for a GT> password. GT> So GT> I think the cert is fine Cool. I updated the docs to reflect that GIT_SSL_NO_VERIFY and "git config http.sslVerify false" are no longer necessary, and will push them into place soon-ish. GT> anonymous fetching over https doesn't work (and maybe it's not GT> intended to work) Correct, it's for committer access, as http://git.gnus.org/ says. I didn't think it was necessary to protect public access with SSL and most projects don't. Ted