Answers: <p>You'd better add this CA to a bundle of valid CA and keep using it for all cases with </p>
  
  <pre><code>git config --add --global http.sslcainfo=/path/to/cabundle
  git config --add --global http.sslbackend=openssl
  </code></pre>
  
  <p>Using <a href="https://curl.haxx.se/docs/caextract.html" rel="nofollow noreferrer">https://curl.haxx.se/docs/caextract.html</a> as starting CA bundle sounds a good idea in my opinion.</p>
  
Answers: CC BY-SA 3.0
Answers: 2017-12-01T11:15:45.780Z
Answers: 2017-12-01T11:15:45.780Z
Answers: Tensibai
Body: <p>I have configured Git to use a specific CA certificate, but how can opt-out for it other than using the switch <code>-c http.sslVerify=false</code>? (or enforce other certificate which seems better in terms of security).</p>
  
  <p>Okay, a workaround was to create a shell script for a shortcut and use it like</p>
  
  <pre><code>gitf clone
  </code></pre>
  
  <p>That is okay for a quick test in a secured and trusted environment but it is a potential security breach. Do not try this at home.</p>
  
  <p>The real gotcha comes then in if I would like to use the Atom editor. Somehow I cannot find an option for the git executable.</p>
  
Tags: <git><windows>
Title: Multiple git profiles especialy with Atom
UserDisplayName: Ta Mu
ThreadText: # Multiple git profiles especialy with Atom
  
  (Asked by: username_0 on 2017-11-23)
  
  I have configured Git to use a specific CA certificate, but how can opt-out for it other than using the switch `-c http.sslVerify=false`? (or enforce other certificate which seems better in terms of security).
  
  Okay, a workaround was to create a shell script for a shortcut and use it like
  
  ```
  gitf clone
  
  ```
  
  That is okay for a quick test in a secured and trusted environment but it is a potential security breach. Do not try this at home.
  
  The real gotcha comes then in if I would like to use the Atom editor. Somehow I cannot find an option for the git executable.
  
  **Tags:** git, windows
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2017-12-01. Score: 2 | Accepted answer
  
  You'd better add this CA to a bundle of valid CA and keep using it for all cases with
  
  ```
  git config --add --global http.sslcainfo=/path/to/cabundle
  git config --add --global http.sslbackend=openssl
  
  ```
  
  Using <https://curl.haxx.se/docs/caextract.html> as starting CA bundle sounds a good idea in my opinion.
  
  
  ---
  
  