Hacker News

points by lukasgelbmann 1 day ago | 0 comments

Homebrew’s git (unlike homebrew’s curl) seems to default to using the system’s CA bundle, not homebrew’s. Is that a bug?

[–] woodruffw 1 day ago

Edit: Sorry, I forgot that I had patched my local bundle. This might indeed be an oversight, I'm looking at it now.

Edit 2: This is being fixed now[1]. Everything below is stale.

I couldn't reproduce this:

  % which git
    /opt/homebrew/bin/git
  % git ls-remote https://git-emudhra.we-have-a-problem.com/check.git
    fatal: unable to access 'https://git-emudhra.we-have-a-problem.com/check.git/': SSL certificate problem: unable to get local issuer certificate

Make sure your `git` binary is Homebrew's, not the system/XCode CLT one. If you see `/usr/bin/git`, you're not using the Homebrewed Git.

[1]: https://github.com/Homebrew/homebrew-core/pull/321878

[–] smmeis 14 hours ago

    $ brew list git --versions
    git 2.56.0_2
    $ which git
    /opt/homebrew/bin/git
    $ which curl
    /opt/homebrew/opt/curl/bin/curl
    $ git ls-remote https://git-emudhra.we-have-a-problem.com/check.git
    2975b9930644b321e18ecae09e29c15b955e6103 HEAD
    2975b9930644b321e18ecae09e29c15b955e6103 refs/heads/main

It seems that the curl formula still needs patching?

[–] bombcar 1 day ago

    $ git ls-remote https://git-emudhra.we-have-a-problem.com/check.git && which git
    2975b9930644b321e18ecae09e29c15b955e6103 HEAD
    2975b9930644b321e18ecae09e29c15b955e6103 refs/heads/main
    /opt/homebrew/bin/git

We watch; we wait (I guess)

[–] lukasgelbmann 1 day ago

> “This is being fixed now”

Wow, that was fast!