OpenSSL bundled with MinGit

[alenmeister]

Howdy.

Is there any way to include OpenSSL in the MinGit releases?
I couldn't find it in the bin folder, sadly.

[dscho]

OpenSSL, the library, is included.

Since the "Min" in MinGit stands for "minimal", in the sense that everything that is not needed by Git is subject to be excluded from MinGit, including the openssl.exe file would be contrary to the goal.

[alenmeister]

That makes total sense. Would it still be possible to include it, though? By manually copying over the necessary binaries? Or has there been changes to the MinGit code base that would prevent me from using it?

[dscho]

You can always copy directly from the corresponding PortableGit.

[alenmeister]

Awesome. Other than openssl.exe, what else might be needed?

[nicoleta-scrimint]

Hi!

In the Git for Windows version 2.38.1.windows.1, I observed that OpenSSL version 1.1.1.17 is included in the path "GitInstallationPath\mingw64\bin\openssl.exe".
Will Git for Windows deliver a new version with the new OpenSSL versions, if it contains security fixes?

Thank you!

[dscho]

Will Git for Windows deliver a new version with the new OpenSSL versions, if it contains security fixes?

Yes. For example, we just updated to OpenSSL v1.1.1s and the next official build (as well as the snapshots) will come with those fixes.