web.cacerts warnings with 1.7.3, how to fix and/or disable check?

[Mads Kiilerich]

On 01/03/2011 07:02 PM, Lasse Vågsæther Karlsen wrote:
> And no, I wasn't really interested in disabling it if I could fix the
> actual problem. However, according to
> changeset 2fa2e6444645563835537e889dd7b5d230348430 Mercurial was
> supposed to silently ignore any certificate problems if web.cacerts
> wasn't configured, and according to "hg showconfig", it wasn't, yet it
> didn't ignore any problems either.

Right, I could have made it more clear that that sentence described the 
bug that was fixed.

> The documentation page tells me I need a file containing certificates,
> but me being an absolutely idiot when it comes to certificate handling
> and processing, I did not know where to get hold of such a file, or
> beyond the text on the documentation page, what it would contain.
>
> I tried downloading the certificate from CodePlex in various file
> formats and give that to it by specifying the full path to and name of a
> file containing that, but that only gave me parsing errors in Mercurial
> so I figured that was incorrect, and the file contents looked nothing
> like the documentation either.
>
> Note that I am still learning Mercurial through and through, so there's
> plenty of stuff about it that I don't know. For instance, I didn't know
> there was a hgrc.d directory in my Mercurial installation with
> system-wide configuration files.

Thanks for sharing the user experience.

I assume "the documentation page" is the hgrc man page found on 
http://www.selenic.com/mercurial/hgrc.5.html#web and that you didn't 
know http://selenic.com/hg/help/config . We really should get these 
pieces of information integrated and cross-linked.

Some information about these issues has been collected on 
http://mercurial.selenic.com/wiki/CACertificates . It doesn't make it 
simple, but it might answer some of your questions.

/Mads