Prerequisites.

• Internet Information Services (IIS) have to be installed on Windows Server. If you don’t know how to do it, please check our post.
• Static ip address

Installing a Git server using bonobo server.

As mentioned above, there are trade options to host Git on web servers. However, it is likely that you want to save costs or may not have limitations. In addition, using Windows Server it is possible to put the server Git within the reach of your organization. For the purpose, We’ll use a software called Bonobo Git Server. It is free and open-source. With that intention, please go to the program page and download the zip file of the application. At the time of writing this article, the version is 6.5.0.

Please note that the file is compressed in ZIP format. So once downloaded, unzip it in the following path: C:\inetpub\wwwroot. This is the default local path for websites in IIS

Modify folder permissions

In order to guarantee the functioning of the program, it is highly recommended to modify the permissions of the folder. With this in mind, please place the uncompressed folder and right-click on it to enter the properties. Next, select the Security tab and then select Edit.

In the next window navigate to IIS users and grant full permission.

Opens IIS

After you have edited the folder permissions, please open Internet Information Services. Then follow this path: Server>Sites>Default Web Site>Bonobo.Git.Server. Then right-click on the folder and select Convert to Application.

In the pop-up window, there are several elements that you can modify. I recommend leaving them all as they are, and press OK to finish the process.

Configuring the Git server

To start the server, please go to the browser and type the following address: localhost/Bonobo.Git.Server

The default username and password is admin. Entering the credentials will skip the configuration options. The first task will be to create a user. To do this, click on the Users tab

Below you will see the list of users, please click on Add new user. Then enter the data of the user to register. Press Create to finish the process.

It is also possible to create teams. As its name indicates, it is the combination of two or more users to perform jobs. To create it, select the Teams tab. And then in Create New Team. Please assign a name and description to the team. Additionally, choose the team members, and press save to finish.

Now let’s create our first repository. To do this please click on Create new repository. Add the repository name, group, and description. You can also attach a logo. Likewise, set the contributors and administrators of the repository. Finally, press create and the repository will be ready.

At the end of the process, you can enter the description of the repository. The repository address is available for copying. It is now possible to use a git client to access it. Finally, we have seen how to establish a git server in Windows Server 2019. This option will allow sharing the repository to the clients that access the server. If you follow the described steps it is possible to configure it in our server. I hope you liked this post. Thank you very much and see you soon.

The post How to set a git server on Windows Server 2019. appeared first on Linux Windows and android Tutorials.

The latest release of Git is currently v2.17.1. This and the future versions are likely to prevent security bugs CVE-2018-11235 and CVE-2018-11233. Among these two, the first one is the most dangerous, as it would allow a crook execute codes on a remote client.

You should update your Git client right now. If you’re using any other Git clients than the official one, you should update your software as soon as the vendor releases update.

Arbitrary code execution on users’ PCs

Using specially built Git submodule, a malicious actor could potentially execute codes on others’ PCs. When the user would clone the repo, the way of Git’s submodule handling should allow the execution.

Server-side fixes for Git hosting services

Git client isn’t the only bugged side here. Git’s server-side components are also patched up. This new fix allows the Git hosting service identify if there’re any malicious codes within the hosted repository(s) and sub-modules of those for preventing the potential attack.

According to Jeff King, a GitHub staff member, the server part was the heaviest to accomplish. The detection of the flaw also required a lot of refactoring. King worked on the Git patches where the other teammates worked on VSTS, JGit, and libgit2 etc.

Here’s an in-depth and technical explanation of the patched up vulnerability (CVE-2018-11235). The credit for discovering this vulnerability goes to Etienne Stalmans who reported the vulnerability via the bounty program of GitHub.

How to stay secured

The only way to stay safe now is to update your Git client and server (if you own) right now. Update your Git client right now. If you’re new to Git, learn how to install Git on your system.

The post Update Git Client Right Now for Staying Secure! appeared first on Linux Windows and android Tutorials.