Comments
Patch
@@ -320,6 +320,11 @@ def has_ssl():
except ImportError:
return False
+@check("defaultcacerts", "can verify SSL certs by system's CA certs store")
+def has_defaultcacerts():
+ from mercurial import sslutil
+ return sslutil._defaultcacerts()
+
@check("windows", "Windows")
def has_windows():
return os.name == 'nt'
@@ -119,7 +119,7 @@ OS X has a dummy CA cert that enables us
Apple's OpenSSL. This trick do not work with plain OpenSSL.
$ DISABLEOSXDUMMYCERT=
-#if osx
+#if defaultcacerts
$ hg clone https://localhost:$HGPORT/ copy-pull
abort: error: *certificate verify failed* (glob)
[255]