| commit | author | age | ||
| 8c99a7 | 1 | |
| 22957a | 2 | ## Using the HTTP/HTTPS transport |
| JM | 3 | |
| 8c99a7 | 4 | ### Https with Self-Signed Certificates |
| JM | 5 | You must tell Git/JGit not to verify the self-signed certificate in order to perform any remote Git operations. |
| 6 | ||
| 7 | **NOTE:** | |
| 8 | The default self-signed certificate generated by Gitlbit GO is bound to *localhost*. | |
| 9 | If you are using Eclipse/EGit/JGit clients, you will have to generate your own certificate that specifies the exact hostname used in your clone/push url. | |
| 10 | You must do this because Eclipse/EGit/JGit (< 3.0) always verifies certificate hostnames, regardless of the *http.sslVerify=false* client-side setting. | |
| 11 | ||
| 12 | - **Eclipse/EGit/JGit** | |
| 13 | 1. Window->Preferences->Team->Git->Configuration | |
| 14 | 2. Click the *New Entry* button | |
| 15 | 3. <pre>Key = <em>http.sslVerify</em> | |
| 16 | Value = <em>false</em></pre> | |
| 17 | - **Command-line Git** ([Git-Config Manual Page](http://www.kernel.org/pub/software/scm/git/docs/git-config.html)) | |
| 18 | <pre>git config --global --bool --add http.sslVerify false</pre> | |
| 19 | ||
| 20 | ### Http Post Buffer Size | |
| 21 | You may find the default post buffer of your git client is too small to push large deltas to Gitblit. Sometimes this can be observed on your client as *hanging* during a push. Other times it can be observed by git erroring out with a message like: error: RPC failed; result=52, HTTP code = 0. | |
| 22 | ||
| 23 | This can be adjusted on your client by changing the default post buffer size: | |
| 24 | <pre>git config --global http.postBuffer 524288000</pre> | |
| 25 | ||
| 26 | ### Disabling SNI | |
| 27 | ||
| 28 | You may run into SNI alerts (Server Name Indication). These will manifest as failures to clone or push to your Gitblit instance. | |
| 29 | ||
| 30 | #### Java-based Clients | |
| 31 | ||
| 935986 | 32 | Luckily, Java 6-based clients ignore SNI alerts but when using Java 7-based clients, SNI checking is enabled by default. You can disable SNI alerts by specifying the JVM system parameter `-Djsse.enableSNIExtension=false` when your Java-based client launches. |
| 8c99a7 | 33 | |
| JM | 34 | For Eclipse, you can append `-Djsse.enableSNIExtension=false` to your *eclipse.ini* file. |
| 35 | ||
| 36 | #### Native Clients | |
| 37 | ||
| 38 | Native clients may display an error when attempting to clone or push that looks like this: | |
| 6c4be1 | 39 | |
| JM | 40 | ``` |
| 8c99a7 | 41 | C:\projects\git\gitblit>git push rhcloud master |
| JM | 42 | error: error:14077458:SSL routines:SSL23_GET_SERVER_HELLO:reason(1112) while accessing https://demo-gitblit.rhcloud.com/git/gitblit.git/info/refs?service=git-receive-pack |
| 43 | fatal: HTTP request failed | |
| 6c4be1 | 44 | ``` |
| 8c99a7 | 45 | |
