[PATCH] subrepo: add status support for ignored files in git subrepos

Matt Mackall mpm at selenic.com
Thu Dec 4 19:23:29 CST 2014


On Thu, 2014-12-04 at 22:01 +0900, Yuya Nishihara wrote:
> On Wed, 03 Dec 2014 20:19:42 -0600, Matt Mackall wrote:
> > On Wed, 2014-12-03 at 20:04 -0500, Matt Harbison wrote:
> > > On Wed, 03 Dec 2014 17:03:34 -0500, Matt Mackall <mpm at selenic.com> wrote:
> > > > On Tue, 2014-12-02 at 23:15 -0500, Matt Harbison wrote:
> > > >> Did you have to do anything special to handle SSL with gmail?  I have  
> > > >> this
> > > >> configuration, tried sending the last patch with thg 3.1.1 on Windows,  
> > > >> and
> > > >> got an SSL version error:
> > > >>
> > > >> abort: _ssl.c:507: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong
> > > >> version number
> > > >
> > > > What OpenSSL version do you have? Google's probably turned off SSLv3
> > > > everywhere due to POODLE (as did we), but any vaguely recent OpenSSL
> > > > should be happy to use TLS v1.2.
> > > 
> > > I don't have OpenSSL installed separately, and it looks like thg ships  
> > > with 0.9.8r, based on the file properties of ssleay32.dll.  It looks like  
> > > 1.0.1 is needed for TLS 1.2.
> > 
> > Looks like we'll have to nudge one of the THG people..
> > 
> > Steve, SSLv3 and below are rapidly being deprecated around the planet:
> > 
> > http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html
> > https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/
> > https://groups.google.com/a/chromium.org/forum/#!
> > topic/security-dev/Vnhy9aKM_l4
> > 
> > ...and
> > 
> > http://www.selenic.com/hg/rev/22db405536be
> > 
> > ..so you'll probably need to bump the SSL library in THG.
> 
> The problem will go away if TortoiseHg is built with Python 2.7.8.  The OpenSSL
> dll which Python actually uses is _ssl.pyd.  Python 2.7.8 bundles new version.
> 
> https://www.python.org/download/releases/2.7.8/

Does our own change to drop SSLv3 mean that no SSL works with the
current THG?

-- 
Mathematics is the supreme nostalgia of our time.




More information about the Mercurial-devel mailing list