hg pull ssl check

Benoit Boissinot bboissin at gmail.com
Mon Oct 16 20:02:34 UTC 2006


In 10/16/06, coderman <coderman at gmail.com> wrote:
> when i pull from an https ssl repo it appears that hg is not
> performing adequate ssl checks.
> [that is, host a repo from ssl with self-signed / unknown ca cert and
> verify that pull does not complain.]
>
> is this an oversight or defaulted to permissive in some config?
>
> i'd like hg to complain unless no verification is requested explicitly
> (like --no-check-certificate for wget).
>
I might be wrong, but I think this is more a python bug than a hg bug.
Anyway if we want this feature we would need external dependancies.

regards,

Benoit



More information about the Mercurial-devel mailing list