SO Answer

Git support for choosing SSL ciphers
====================================

You can use the `http.sslCipherList` git configuration variable to do this.

The `http.sslCipherList` variable is described as follows within Git's documentation:

>A list of SSL ciphers to use when negotiating an SSL connection. The available ciphers depend on whether libcurl was built against NSS or OpenSSL and the particular configuration of the crypto library in use. Internally this sets the `CURLOPT_SSL_CIPHER_LIST` option; see [the libcurl documentation][libcURL-man] for more details on the format of this list.


Git command
-----------

To set the cipher list globally for Git you would run:

`git config --global http.sslCipherList "<List of Cipher Identifiers>"`

It is **extremely important** to understand that **the cipher identifiers accepted by cURL differ based upon the SSL library cURL has been linked against**! That makes this configuration value non-portable between all installations of cURL which differ in their linked SSL library.

Additionally, while I have linked back-end specific documentation below, **only the cURL documentation on cipher identifiers is reliable** because the cURL developers did not perfectly reproduce and/or support the various identifiers for each back-end as detailed in [this mailing list thread][cURL-mail].

Resources
=========

 - [The git config section for `http.sslCipherList`][gitconfig]
 - [The cURL man page for the CURLOPT_SSL_CIPHER_LIST variable][libcURL-man]
 - [The cURL ciphers for all back-ends (reliable)][cURL-backends]
 - [cipher supported by the openSSL back-end][openSSL-man]
 - [mod_NSS ciphers supported by the NSS back-end][NSS-modNSS]
 - [mod_SSL ciphers supported by the NSS back-end][NSS-modSSL]

[gitconfig]: https://git-scm.com/docs/git-config#git-config-httpsslCipherList
[libcURL-man]: https://curl.haxx.se/libcurl/c/CURLOPT_SSL_CIPHER_LIST.html
[cURL-mail]: https://curl.haxx.se/mail/lib-2016-05/0093.html
[cURL-backends]: https://curl.haxx.se/docs/ssl-ciphers.html
[NSS-modNSS]: https://pagure.io/mod_nss/blob/master/f/docs/mod_nss.html#_589
[NSS-modSSL]: https://httpd.apache.org/docs/current/mod/mod_ssl.html#sslciphersuite
[openSSL-man]: https://www.openssl.org/docs/manmaster/man1/ciphers.html