[PATCH RFC] ssl: load CA certificates from system's store by default on Python 2.7.9

Sean Farley sean.michael.farley at gmail.com
Thu Feb 26 12:10:48 CST 2015


Yuya Nishihara writes:

> # HG changeset patch
> # User Yuya Nishihara <yuya at tcha.org>
> # Date 1424958853 -32400
> #      Thu Feb 26 22:54:13 2015 +0900
> # Node ID 7ee972a1ee715e252f850b285e19c51fd8881e2e
> # Parent  8d338a372e6888cdd3c18fe142b01b5349664d5e
> ssl: load CA certificates from system's store by default on Python 2.7.9
>
> This will make it easy to manage in-house CA certificates, which are often
> used in corporate environment and installed into Windows' certs store.
>
> It explicitly checks "cacerts is None" to honor --insecure option that sets
> web.cacerts = ''. Another option is to use dummycert.pem as a flag to call
> load_default_certs().

For what it's worth, this fixes issue4500 from what I could test.


More information about the Mercurial-devel mailing list