Re: GIT_SSL_NO_VERIFY=1 over http doesn't ignore a different ip address for the signed certificate

On Thu, Feb 21, 2008 at 11:09 AM, Mike Hommey [off-list ref] wrote:

On Thu, Feb 21, 2008 at 10:57:58AM -0800, Anatoly Yakovenko wrote:
 > yep, it tells me that the certificate is rejected because it was
 > signed for a different ip then the one i am connected too.  while this
 > is a security threat, browsers will let you ignore it, so i expect
 > that libcurl or git should be able to ignore that error as well.

 What is the exact message ?

$ GIT_SSL_NO_VERIFY=1 GIT_CURL_VERBOSE=1 git clone
https://aeyakovenko@127.0.0.1/git

i get this as an error:

error: SSL: certificate subject name 'localhost' does not match target
host name '127.0.0.1' (curl_result = 51, http_code = 0, sha1 =
4590de71622f1a90f906413fd7f63d5553cd5f93)

cloning https://aeyakovenko@localhost/git works fine