This option make it easy to ignore anything about the server we're
connecting to, which is bad security practice. This was necessary as we
didn't use to expose detailed information about the certificate, but now
that we do, we should get rid of this.

If the user wants to ignore everything, they can still provide a
callback which ignores all the information passed.

This should make the mingw compiler happy.

If the user returns 0 from the certificate check and we had certificate issues, set the options to ignore certificate errors and resend the request.

We need to call WinHttpSendRequest() in three different places. Unify all in a single function to have a single place for the certificate check.

If we're not using SSL, don't call the user's certificate check callback.

On successful connection, still ask the user whether they accept the server's certificate, indicating that WinHTTP would let it though.

Returning 0 lets the certificate check succeed. An error code is bubbled
up to the user.

We know the host's key as soon as we connect, so we should perform the
check as soon as we can, before we bother with the user's credentials.

We should let the user decide whether to cancel the connection or not
regardless of whether our checks have decided that the certificate is
fine. We provide our own assessment to the callback to let the user fall
back to our checks if they so desire.

Instead of the parsed data, we can ask OpenSSL to give us the
DER-encoded version of the certificate, which the user can then parse
and validate.

If the certificate validation fails (or always in the case of ssh),
let the user decide whether to allow the connection.

The data structure passed to the user is the native certificate
information from the underlying implementation, namely OpenSSL or
WinHTTP.

Fix ahead-behind results

When we see PARENT1, it means there is a local commit and thus we are
ahead. Likewise, seeing PARENT2 means that the upstream branch has a
commit and we are one more behind.

The logic is currently reversed. Correct it.

This fixes #2501.

The logic was reversed. I have checked manually each pair with git and
adjusted the expectation to what git status prints.

winhttp: Prevent swallowing of url parsing error

Set timeout on remote (Add timeout for WinHttpReceiveResponse #2147)

Allow to override default ssh transport_cb - in order to allow third party ssh transports

Signed-off-by: Sven Strickroth <email@cs-ware.de>

Set timeout on remote (WinHTTP) should return error in case of failure. Connection timeout set to 1 minute. Read/Write timeout remains set to infinite #2147

Refactor git_cache to use an rwlock

This significantly reduces contention when many threads are trying to
read from the cache simultaneously.

Fix bugs with negative ignores inside an ignored parent directory

add Julia to the language bindings list

pack: return the correct final offset

W/o this patch it is not possible to have a third party ssh transport_cb if GIT_SSH is disabled or a third party transport_cb which has a higher priority than the default one.

Signed-off-by: Sven Strickroth <email@cs-ware.de>

The callers of git_packfile_unpack() expect the obj_offset argument to
be set to the beginning of the next object. We were mistakenly returning
the the offset of the object's data, which causes the CRC function to
try to use the wrong offset.

Set obj_offset to curpos instead of elem->offset to point to the next
element and bring back expected behaviour.

merge base: Correctly raise an error if a non-commit object is passed.

Allow mkdir helper to skip parent errors

Check if the refspec matches before transforming

Our mkdir helper was failing is a parent directory was not
accessible even if the child directory could be created.
This changes the helper to keep trying child directories
even when the parent is unwritable.