Skip to content

Commit 3eeed87

Browse files
plentydonegitster
authored andcommitted
docs: indicate http.sslCertType and sslKeyType
0a01d41 (http: add support for different sslcert and sslkey types., 2023-03-20) added useful SSL config options, but did not document them. Signed-off-by: Andrew Carter <[email protected]> Signed-off-by: Junio C Hamano <[email protected]>
1 parent 5c21db3 commit 3eeed87

File tree

1 file changed

+15
-0
lines changed

1 file changed

+15
-0
lines changed

Documentation/config/http.txt

+15
Original file line numberDiff line numberDiff line change
@@ -216,6 +216,21 @@ http.sslBackend::
216216
This option is ignored if cURL lacks support for choosing the SSL
217217
backend at runtime.
218218

219+
http.sslCertType::
220+
Type of client certificate used when fetching or pushing over HTTPS.
221+
"PEM", "DER" are supported when using openssl or gnutls backends. "P12"
222+
is supported on "openssl", "schannel", "securetransport", and gnutls 8.11+.
223+
See also libcurl `CURLOPT_SSLCERTTYPE`. Can be overridden by the
224+
`GIT_SSL_CERT_TYPE` environment variable.
225+
226+
http.sslKeyType::
227+
Type of client private key used when fetching or pushing over HTTPS. (e.g.
228+
"PEM", "DER", or "ENG"). Only applicable when using "openssl" backend. "DER"
229+
is not supported with openssl. Particularly useful when set to "ENG" for
230+
authenticating with PKCS#11 tokens, with a PKCS#11 URL in sslCert option.
231+
See also libcurl `CURLOPT_SSLKEYTYPE`. Can be overridden by the
232+
`GIT_SSL_KEY_TYPE` environment variable.
233+
219234
http.schannelCheckRevoke::
220235
Used to enforce or disable certificate revocation checks in cURL
221236
when http.sslBackend is set to "schannel". Defaults to `true` if

0 commit comments

Comments
 (0)