equal
deleted
inserted
replaced
119 Apple's OpenSSL. This trick do not work with plain OpenSSL. |
119 Apple's OpenSSL. This trick do not work with plain OpenSSL. |
120 |
120 |
121 $ DISABLEOSXDUMMYCERT= |
121 $ DISABLEOSXDUMMYCERT= |
122 #if osx |
122 #if osx |
123 $ hg clone https://localhost:$HGPORT/ copy-pull |
123 $ hg clone https://localhost:$HGPORT/ copy-pull |
124 abort: error: *:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed (glob) |
124 abort: error: *certificate verify failed* (glob) |
125 [255] |
125 [255] |
126 |
126 |
127 $ DISABLEOSXDUMMYCERT="--config=web.cacerts=" |
127 $ DISABLEOSXDUMMYCERT="--config=web.cacerts=" |
128 #endif |
128 #endif |
129 |
129 |
203 warning: 127.0.0.1 certificate with fingerprint 91:4f:1a:ff:87:24:9c:09:b6:85:9b:88:b1:90:6d:30:75:64:91:ca not verified (check hostfingerprints or web.cacerts config setting) |
203 warning: 127.0.0.1 certificate with fingerprint 91:4f:1a:ff:87:24:9c:09:b6:85:9b:88:b1:90:6d:30:75:64:91:ca not verified (check hostfingerprints or web.cacerts config setting) |
204 pulling from https://127.0.0.1:$HGPORT/ |
204 pulling from https://127.0.0.1:$HGPORT/ |
205 searching for changes |
205 searching for changes |
206 no changes found |
206 no changes found |
207 $ hg -R copy-pull pull --config web.cacerts=pub-other.pem |
207 $ hg -R copy-pull pull --config web.cacerts=pub-other.pem |
208 abort: error: *:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed (glob) |
208 abort: error: *certificate verify failed* (glob) |
209 [255] |
209 [255] |
210 $ hg -R copy-pull pull --config web.cacerts=pub-other.pem --insecure |
210 $ hg -R copy-pull pull --config web.cacerts=pub-other.pem --insecure |
211 warning: localhost certificate with fingerprint 91:4f:1a:ff:87:24:9c:09:b6:85:9b:88:b1:90:6d:30:75:64:91:ca not verified (check hostfingerprints or web.cacerts config setting) |
211 warning: localhost certificate with fingerprint 91:4f:1a:ff:87:24:9c:09:b6:85:9b:88:b1:90:6d:30:75:64:91:ca not verified (check hostfingerprints or web.cacerts config setting) |
212 pulling from https://localhost:$HGPORT/ |
212 pulling from https://localhost:$HGPORT/ |
213 searching for changes |
213 searching for changes |
216 Test server cert which isn't valid yet |
216 Test server cert which isn't valid yet |
217 |
217 |
218 $ hg -R test serve -p $HGPORT1 -d --pid-file=hg1.pid --certificate=server-not-yet.pem |
218 $ hg -R test serve -p $HGPORT1 -d --pid-file=hg1.pid --certificate=server-not-yet.pem |
219 $ cat hg1.pid >> $DAEMON_PIDS |
219 $ cat hg1.pid >> $DAEMON_PIDS |
220 $ hg -R copy-pull pull --config web.cacerts=pub-not-yet.pem https://localhost:$HGPORT1/ |
220 $ hg -R copy-pull pull --config web.cacerts=pub-not-yet.pem https://localhost:$HGPORT1/ |
221 abort: error: *:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed (glob) |
221 abort: error: *certificate verify failed* (glob) |
222 [255] |
222 [255] |
223 |
223 |
224 Test server cert which no longer is valid |
224 Test server cert which no longer is valid |
225 |
225 |
226 $ hg -R test serve -p $HGPORT2 -d --pid-file=hg2.pid --certificate=server-expired.pem |
226 $ hg -R test serve -p $HGPORT2 -d --pid-file=hg2.pid --certificate=server-expired.pem |
227 $ cat hg2.pid >> $DAEMON_PIDS |
227 $ cat hg2.pid >> $DAEMON_PIDS |
228 $ hg -R copy-pull pull --config web.cacerts=pub-expired.pem https://localhost:$HGPORT2/ |
228 $ hg -R copy-pull pull --config web.cacerts=pub-expired.pem https://localhost:$HGPORT2/ |
229 abort: error: *:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed (glob) |
229 abort: error: *certificate verify failed* (glob) |
230 [255] |
230 [255] |
231 |
231 |
232 Fingerprints |
232 Fingerprints |
233 |
233 |
234 $ echo "[hostfingerprints]" >> copy-pull/.hg/hgrc |
234 $ echo "[hostfingerprints]" >> copy-pull/.hg/hgrc |
284 no changes found |
284 no changes found |
285 |
285 |
286 Test https with cert problems through proxy |
286 Test https with cert problems through proxy |
287 |
287 |
288 $ http_proxy=http://localhost:$HGPORT1/ hg -R copy-pull pull --config web.cacerts=pub-other.pem |
288 $ http_proxy=http://localhost:$HGPORT1/ hg -R copy-pull pull --config web.cacerts=pub-other.pem |
289 abort: error: *:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed (glob) |
289 abort: error: *certificate verify failed* (glob) |
290 [255] |
290 [255] |
291 $ http_proxy=http://localhost:$HGPORT1/ hg -R copy-pull pull --config web.cacerts=pub-expired.pem https://localhost:$HGPORT2/ |
291 $ http_proxy=http://localhost:$HGPORT1/ hg -R copy-pull pull --config web.cacerts=pub-expired.pem https://localhost:$HGPORT2/ |
292 abort: error: *:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed (glob) |
292 abort: error: *certificate verify failed* (glob) |
293 [255] |
293 [255] |