On 24/06/16 03:41AM, David C. Rankin wrote:
All,
Hello everyone,
After recent git update, read only repos hosted on a local Apache server could no longer pull over https. (gitweb remained fine) Repositories closed read/write over ssh were fine.
On the server the repositories under /srv/git were owned david:david (me). However, after the git change, git refused to serve over https unless the directories under /srv/git were owned by http.
I think this is due to a change in git 2.45.1 that fixed a few security issues[0] and also made our internal workflows fail. The relevant change in devtools[1] contains a possible workaround, but this of course depends on whether you can treat the repositories as trusted or not. Cheers, chris [0]: https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.45... [1]: https://gitlab.archlinux.org/archlinux/devtools/-/commit/7cb72699f651a9e7ac8...