hg pull ssl check

coderman coderman at gmail.com
Mon Oct 16 19:22:11 UTC 2006


when i pull from an https ssl repo it appears that hg is not
performing adequate ssl checks.
[that is, host a repo from ssl with self-signed / unknown ca cert and
verify that pull does not complain.]

is this an oversight or defaulted to permissive in some config?

i'd like hg to complain unless no verification is requested explicitly
(like --no-check-certificate for wget).

best regards,



More information about the Mercurial-devel mailing list