From f6f2a9e42d14e61429af418d8038aa67049b3821 Mon Sep 17 00:00:00 2001 From: Lars Kellogg-Stedman Date: Fri, 8 May 2015 09:22:15 -0400 Subject: http: add support for specifying an SSL cipher list Teach git about a new option, "http.sslCipherList", which permits one to specify a list of ciphers to use when negotiating SSL connections. The setting can be overwridden by the GIT_SSL_CIPHER_LIST environment variable. Signed-off-by: Lars Kellogg-Stedman Signed-off-by: Junio C Hamano --- Documentation/config.txt | 13 +++++++++++++ 1 file changed, 13 insertions(+) (limited to 'Documentation') diff --git a/Documentation/config.txt b/Documentation/config.txt index 1a8ddb41c7..0a01bf930b 100644 --- a/Documentation/config.txt +++ b/Documentation/config.txt @@ -1561,6 +1561,19 @@ http.savecookies:: If set, store cookies received during requests to the file specified by http.cookiefile. Has no effect if http.cookiefile is unset. +http.sslCipherList:: + A list of SSL ciphers to use when negotiating an SSL connection. + The available ciphers depend on whether libcurl was built against + NSS or OpenSSL and the particular configuration of the crypto + library in use. Internally this sets the 'CURLOPT_SSL_CIPHER_LIST' + option; see the libcurl documentation for more details on the format + of this list. ++ +Can be overridden by the 'GIT_SSL_CIPHER_LIST' environment variable. +To force git to use libcurl's default cipher list and ignore any +explicit http.sslCipherList option, set 'GIT_SSL_CIPHER_LIST' to the +empty string. + http.sslVerify:: Whether to verify the SSL certificate when fetching or pushing over HTTPS. Can be overridden by the 'GIT_SSL_NO_VERIFY' environment -- cgit v1.3-5-g9baa