web.cacerts warnings with 1.7.3, how to fix and/or disable check?

[Lasse Vågsæther Karlsen]

To be honest, the "check web.cacerts" warning felt pretty much the same way
as a light in my car that lights up sometimes. The documentation for that
light is "check engine".

And no, I wasn't really interested in disabling it if I could fix the actual
problem. However, according to
changeset 2fa2e6444645563835537e889dd7b5d230348430 Mercurial was supposed to
silently ignore any certificate problems if web.cacerts wasn't configured,
and according to "hg showconfig", it wasn't, yet it didn't ignore any
problems either.

The documentation page tells me I need a file containing certificates, but
me being an absolutely idiot when it comes to certificate handling and
processing, I did not know where to get hold of such a file, or beyond the
text on the documentation page, what it would contain.

I tried downloading the certificate from CodePlex in various file formats
and give that to it by specifying the full path to and name of a file
containing that, but that only gave me parsing errors in Mercurial so I
figured that was incorrect, and the file contents looked nothing like the
documentation either.

Note that I am still learning Mercurial through and through, so there's
plenty of stuff about it that I don't know. For instance, I didn't know
there was a hgrc.d directory in my Mercurial installation with system-wide
configuration files.

Since the actual cause here was that I had an old Mercurial binary
installation, and a new TortoiseHg installation, is there any way for me to
ask Mercurial to tell me where it got all its configuration from? Not
necessarily for each key, but a list of configuration files that was read
in?

-- 
Lasse Vågsæther Karlsen


2011/1/3 Mads Kiilerich <mads at kiilerich.com>

> On 01/03/2011 12:42 PM, Lasse Vågsæther Karlsen wrote:
>
>> I updated to 1.7.3 today and I'm getting warnings about certificate
>> checks on the following sites:
>>
>> * bitbucket
>> * kiln
>> * codeplex
>>
>> I assume I would get it on all sites that use https://
>>
>> So, I wonder if there's any documentation/tutorials telling me how to go
>> about getting rid of those warnings. I'm a programmer, and I've been
>> taught (by experience) that getting rid of warnings is a good thing. If
>> Mercurial 1.7.3 is going to teach me to just ignore that it gives me a
>> warning, the one time it is going to warn me about something useful, I
>> will miss it. So I'd like to get rid of the warning.
>>
>
> I hope that you also have learned that warnings are there to help you. You
> should act on them and make them go away by fixing whatever they point at.
> Getting rid of warnings by disabling them isn't a solution.
>
>     warning: hg01.codeplex.com <http://hg01.codeplex.com> certificate
>>
>>    not verified (check web.cacerts config setting)
>>
>
> Please help us improve the message and the documentation:
>
> How did you understand the "check web.cacerts config setting" part? Where
> did you go, what did you find there and what did that [fail to] tell you?
>
> /Mads
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mercurial-scm.org/pipermail/mercurial-devel/attachments/20110103/04f7f882/attachment.html>