Arch Linux

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#24950 - [mercurial] Should point to correct CA certificates file by default

Attached to Project: Arch Linux
Opened by Marti (intgr) - Wednesday, 29 June 2011, 09:54 GMT
Last edited by Giovanni Scafora (giovanni) - Tuesday, 19 July 2011, 08:45 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Giovanni Scafora (giovanni)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No

Details

Description: Whenever operating with Mercurial with a HTTPS repository, it prints out warnings like:
warning: bitbucket.org certificate with fingerprint 81:2b:08:90:dc:d3:71:ee:e0:7c:b4:75:ce:9b:6c:48:94:56:a1:fe not verified (check hostfingerprints or web.cacerts config setting)

Here's the explanation: http://mercurial.selenic.com/wiki/CACertificates

The "correct" solution would be to include a default /etc/mercurial/hgrc file with the package, and set the certificate path there:

[web]
cacerts = /etc/ssl/certs/ca-certificates.crt
This task depends upon

Closed by  Giovanni Scafora (giovanni)
Tuesday, 19 July 2011, 08:45 GMT
Reason for closing:  Not a bug
Comment by Giovanni Scafora (giovanni) - Thursday, 30 June 2011, 14:46 GMT
The "correct" solution is to set the certificate path to your ~/.hgrc file
Comment by Marti (intgr) - Thursday, 30 June 2011, 14:58 GMT
Ok, ignore the word "correct" :)

I can imagine that most users would prefer this to just work. Web browsers do this validations always, transparently. Including this configuration with the package seems like a useful thing to do.

Compared to every user needing to Google for this problem, figure out the certificate file path and configure it for themselves manually.
Comment by Marti (intgr) - Sunday, 17 July 2011, 21:23 GMT
  • Field changed: Percent Complete (100% → 0%)
I can see the /etc/mercurial/hgrc file now, but it contains nothing about certificates.
Comment by Giovanni Scafora (giovanni) - Monday, 18 July 2011, 21:57 GMT
Is it so hard writing yourself the following lines?
[web]
cacerts = /etc/ssl/certs/ca-certificates.crt

Loading...