]> git.ipfire.org Git - thirdparty/git.git/commit - http.c
http: control GSSAPI credential delegation
authorPetr Stodulka <pstodulk@redhat.com>
Wed, 28 Sep 2016 18:01:34 +0000 (20:01 +0200)
committerJunio C Hamano <gitster@pobox.com>
Fri, 30 Sep 2016 03:39:23 +0000 (20:39 -0700)
commit26a7b2342980f2eb46b47122d1d6dfbf13ed4ccb
tree13a0d669ec8d181f7075f73a32ea825f760f4921
parent7c0304af62fcb777faac6eebd8c242d3de4f605d
http: control GSSAPI credential delegation

Delegation of credentials is disabled by default in libcurl since
version 7.21.7 due to security vulnerability CVE-2011-2192. Which
makes troubles with GSS/kerberos authentication when delegation
of credentials is required. This can be changed with option
CURLOPT_GSSAPI_DELEGATION in libcurl with set expected parameter
since libcurl version 7.22.0.

This patch provides new configuration variable http.delegation
which corresponds to curl parameter "--delegation" (see man 1 curl).

The following values are supported:

* none (default).
* policy
* always

Signed-off-by: Petr Stodulka <pstodulk@redhat.com>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Documentation/config.txt
http.c