[MacPorts] #28065: mercurial: Error when pulling from https with cert not signed by a CA in the default list

MacPorts noreply at macports.org
Sat Nov 19 02:54:23 PST 2011


#28065: mercurial: Error when pulling from https with cert not signed by a CA in
the default list
------------------------------+---------------------------------------------
 Reporter:  brejoc@…          |       Owner:  deric@…           
     Type:  defect            |      Status:  new               
 Priority:  Normal            |   Milestone:                    
Component:  ports             |     Version:  1.9.1             
 Keywords:                    |        Port:  mercurial         
------------------------------+---------------------------------------------

Comment(by jmr@…):

 I'm not sure there's really a bug here. Accepting certificates not signed
 by a known CA is not a safe default.

 The port is initially configured to use curl-ca-bundle for its list of
 acceptable CAs. If you want to use a different list globally, edit
 ${prefix}/etc/mercurial/hgrc (or override it in ~/.hgrc). If you want to
 use a different cacerts file for a clone, use `--config
 web.cacerts=<path>`. If you really want to skip validating the
 certificate, use `--insecure`.

-- 
Ticket URL: <https://trac.macports.org/ticket/28065#comment:5>
MacPorts <http://www.macports.org/>
Ports system for Mac OS


More information about the macports-tickets mailing list