mercurial beginner HTTPS trouble

[Chris Morgan]

Yeah, I figured this IS working for plenty of people... from the docs  
it's sort of implied that the features combine (using proxy, using SSL).

I'm no expert but the guy at my company who did some troubleshooting  
on this for me surmised that this happens to work if HTTP GET is  
permitted to pass through the proxy even when it's an HTTPS  
connection. He reviewed the relevant spec and came to the conclusion  
that that is not technically correct and that it should be CONNECT. We  
have a commercial proxy (Bluecoat) that is apparently rather strict.

I could ask him for some details on that conclusion if it would help.  
He's not a source control guy, but fortunately loves Python as well as  
being one of the networking gurus at our place. He read the Mercurial  
source and it does look like it has the limitation mentioned on the  
ActiveState page (linked below) since it uses urllib2.

Cheers

Chris

On Dec 21, 2007, at 3:43 AM, John Rice wrote:

> Chris - must be something else, I'm using hg to connect to a repo  
> over https behind a proxy without any problem.
>
> $ hg clone https://<user>:hguser at hg.netbeans.org/main main   <--  
> where user is just a NetBeans registered user
>
> JR
>
> Chris Morgan wrote:
>>> You're the first person to report this, what webserver are you  
>>> using?
>>>
>>
>> It's a proxy from Bluecoat (I responded to Matt only earlier, this
>> time also to the list)
>>
>> My networking colleague points out that
>>
>> "
>> I think python's urllib2 (which hg's code is using), does not  
>> support https
>> through a proxy:
>> http://www.voidspace.org.uk/python/articles/urllib2.shtml
>> "Currently urllib2 does not support fetching of https locations  
>> through a
>> proxy. This can be a problem."
>> http://aspn.activestate.com/ASPN/Cookbook/Python/Recipe/456195
>> http://mail.python.org/pipermail/python-bugs-list/2007-August/039293.html
>> "
>>
>> Is the problem that I can't use a proxy to connect a Mercurial client
>> to a server over HTTPS?
>>
>> Chris
>> _______________________________________________
>> Mercurial mailing list
>> Mercurial at selenic.com
>> http://selenic.com/mailman/listinfo/mercurial
>>
>