通过HTTP Git作为传输协议

Question

I was looking at the git documentation here and it mentions that git supports HTTP(s). I'm curious about whether git does any kind of certificate validation when pushing/cloning codebases over HTTPS. If so, could someone point me to the code snippet where this happens?

Answer 1

Yes, the git client does perform certificate validation. You can disable validation using this command:

git config ––global http.sslVerify false

Try checking the http.sslVerify documentation.

Check here for where it's called.

Answer 2

You can find the following defined here: http://git-scm.com/docs/git-config

http.sslVerify
Whether to verify the SSL certificate when fetching or pushing over HTTPS. Can be overridden by the GIT_SSL_NO_VERIFY environment variable.