<p>You'd better add this CA to a bundle of valid CA and keep using it for all cases with </p>

<pre><code>git config --add --global http.sslcainfo=/path/to/cabundle
git config --add --global http.sslbackend=openssl
</code></pre>

<p>Using <a href="https://curl.haxx.se/docs/caextract.html" rel="nofollow noreferrer">https://curl.haxx.se/docs/caextract.html</a> as starting CA bundle sounds a good idea in my opinion.</p>

CC BY-SA 3.0
2017-12-01T11:15:45.780Z
2017-12-01T11:15:45.780Z
Tensibai
<p>I have configured Git to use a specific CA certificate, but how can opt-out for it other than using the switch <code>-c http.sslVerify=false</code>? (or enforce other certificate which seems better in terms of security).</p>

<p>Okay, a workaround was to create a shell script for a shortcut and use it like</p>

<pre><code>gitf clone
</code></pre>

<p>That is okay for a quick test in a secured and trusted environment but it is a potential security breach. Do not try this at home.</p>

<p>The real gotcha comes then in if I would like to use the Atom editor. Somehow I cannot find an option for the git executable.</p>

<git><windows>
Multiple git profiles especialy with Atom
Ta Mu
# Multiple git profiles especialy with Atom

(Asked by: username_0 on 2017-11-23)

I have configured Git to use a specific CA certificate, but how can opt-out for it other than using the switch -c http.sslVerify=false? (or enforce other certificate which seems better in terms of security).
Okay, a workaround was to create a shell script for a shortcut and use it like
gitf clone

That is okay for a quick test in a secured and trusted environment but it is a potential security breach. Do not try this at home.
The real gotcha comes then in if I would like to use the Atom editor. Somehow I cannot find an option for the git executable.

**Tags:** git, windows


---

## 1 answers

### Answer by username_1 on 2017-12-01. Score: 2 | Accepted answer

You'd better add this CA to a bundle of valid CA and keep using it for all cases with 
git config --add --global http.sslcainfo=/path/to/cabundle
git config --add --global http.sslbackend=openssl

Using https://curl.haxx.se/docs/caextract.html as starting CA bundle sounds a good idea in my opinion.


---

