From: Andrew Carter Date: Wed, 5 Feb 2025 05:38:56 +0000 (-0600) Subject: docs: indicate http.sslCertType and sslKeyType X-Git-Tag: v2.49.0-rc0~13^2 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=3eeed876a909c45695f2f3a3edd4141be331a3be;p=thirdparty%2Fgit.git docs: indicate http.sslCertType and sslKeyType 0a01d41ee4 (http: add support for different sslcert and sslkey types., 2023-03-20) added useful SSL config options, but did not document them. Signed-off-by: Andrew Carter Signed-off-by: Junio C Hamano --- diff --git a/Documentation/config/http.txt b/Documentation/config/http.txt index 162b33fc52..ed11ddcd02 100644 --- a/Documentation/config/http.txt +++ b/Documentation/config/http.txt @@ -216,6 +216,21 @@ http.sslBackend:: This option is ignored if cURL lacks support for choosing the SSL backend at runtime. +http.sslCertType:: + Type of client certificate used when fetching or pushing over HTTPS. + "PEM", "DER" are supported when using openssl or gnutls backends. "P12" + is supported on "openssl", "schannel", "securetransport", and gnutls 8.11+. + See also libcurl `CURLOPT_SSLCERTTYPE`. Can be overridden by the + `GIT_SSL_CERT_TYPE` environment variable. + +http.sslKeyType:: + Type of client private key used when fetching or pushing over HTTPS. (e.g. + "PEM", "DER", or "ENG"). Only applicable when using "openssl" backend. "DER" + is not supported with openssl. Particularly useful when set to "ENG" for + authenticating with PKCS#11 tokens, with a PKCS#11 URL in sslCert option. + See also libcurl `CURLOPT_SSLKEYTYPE`. Can be overridden by the + `GIT_SSL_KEY_TYPE` environment variable. + http.schannelCheckRevoke:: Used to enforce or disable certificate revocation checks in cURL when http.sslBackend is set to "schannel". Defaults to `true` if