[PATCH] verify certificate of https server

[Bryan O'Sullivan]

On Wed, Apr 8, 2009 at 3:43 AM, Dimitris Glynos <dimitris at census-labs.com>wrote:

>
> What this patch changes is the ssl socket used by the *client*
> to be the one provided by pyopenssl. So both client and server
> now work with pyopenssl. Of course, if pyopenssl is missing,
> the application works ok, but with no SSL functionality.
>

That's not really an acceptable change. The functionality that should be
lost if you lack pyOpenSSL is just the ability to check a server
certificate, nothing more. That would not represent a regression over
current behaviour.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://selenic.com/pipermail/mercurial-devel/attachments/20090408/2605ddda/attachment.htm