Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-52603

Add sslVerify, sslCert, sslKey, sslCAInfo to git configuration

    • Icon: Improvement Improvement
    • Resolution: Unresolved
    • Icon: Minor Minor
    • git-plugin
    • None

      It should be possible to add git configuration options like mentioned above on the Configurate System  Page. At the moment is only possible to add the username and the email. 

          [JENKINS-52603] Add sslVerify, sslCert, sslKey, sslCAInfo to git configuration

          Mark Waite added a comment -

          I recommend against this, since self-signed certificates tend to be very brittle. We spend far too much time trying to identify all the files which must be modified and all the locations that must be modified to support self-signed certificates. It is better to not mislead users to think that self-signed certificates are easy to use or simple to configure. As far as I can tell, they are not.

          Mark Waite added a comment - I recommend against this, since self-signed certificates tend to be very brittle. We spend far too much time trying to identify all the files which must be modified and all the locations that must be modified to support self-signed certificates. It is better to not mislead users to think that self-signed certificates are easy to use or simple to configure. As far as I can tell, they are not.

          Jorge Machado added a comment -

          Hi, yes  agree with that comment. But if people cannot configure that on a system level they need to do this: 

           

          steps {
                          withCredentials([
                              file(credentialsId: ...
                              file(credentialsId: ...)]) {
                                  
                                      sh 'git init'
                                      sh 'git config --local http.sslKey $KEY'
                                      sh 'git config --local http.sslCert $CERT'
                                      sh 'git config --local http.sslCaInfo $CA'
                                      git url: 'https://gitserverWithSSL', branch: 'thebranch', credentialsId: 'gitCredentials'
                                  }
          

           ending up putting the certificate on the credentials and worst not being able to version the  pipeline file. I really don't like the workaround that's why I created the ticket

           

          Jorge Machado added a comment - Hi, yes  agree with that comment. But if people cannot configure that on a system level they need to do this:    steps { withCredentials([ file(credentialsId: ... file(credentialsId: ...)]) { sh 'git init' sh 'git config --local http.sslKey $KEY' sh 'git config --local http.sslCert $CERT' sh 'git config --local http.sslCaInfo $CA' git url: 'https: //gitserverWithSSL' , branch: 'thebranch' , credentialsId: 'gitCredentials' }  ending up putting the certificate on the credentials and worst not being able to version the  pipeline file. I really don't like the workaround that's why I created the ticket  

            Unassigned Unassigned
            jomach Jorge Machado
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated: