migration completed! (was: hg.intevation.de will soon be new primary name of) hg.intevation.org

[Thomas Arendsen Hein]

* Thomas Arendsen Hein <thomas at intevation.de> [20160127 14:11]:
> The current SSL certificate of hg.intevation.org (signed by
> Intevation's CA) will expire on February 12th, 2016
> 
> The new certificate will be for the name hg.intevation.de and will
> be signed by a commercial CA, so all nearly all browsers will accept
> it automatically.
> 
> So you encounter the error message
> hg.intevation.org certificate error: certificate is for *.intevation.de, intevation.de
> just change your URL to e.g. https://hg.intevation.de/mercurial/crew/
> and all should be fine.
> 
> For plain http access nothing changes, the hostname
> hg.intevation.org will continue to work.

I just made the switch.

If you still want to use the old URL for https access, you can add
this to your hgrc file:

[hostfingerprints]
hg.intevation.org = fc:e2:8d:d9:51:cd:cb:c1:4d:18:6b:b7:44:8d:49:72:57:e6:cd:33


For accessing https://hg.intevation.de/ with Mercurial, you should
have configured your web.cacerts setting as described on
https://www.mercurial-scm.org/wiki/CACertificates

Alternatively you can manually add the fingerprint of
hg.intevation.de in the same way as shown above:

[hostfingerprints]
hg.intevation.de = fc:e2:8d:d9:51:cd:cb:c1:4d:18:6b:b7:44:8d:49:72:57:e6:cd:33


These fingerprints will change every few years (next time in
May/June 2018), so using web.cacerts is better.

Regards,
Thomas

-- 
thomas at intevation.de - http://intevation.de/~thomas/ - OpenPGP key: 0x5816791A
Intevation GmbH, Neuer Graben 17, 49074 Osnabrueck - AG Osnabrueck, HR B 18998
Geschaeftsfuehrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 181 bytes
Desc: not available
URL: <http://selenic.com/pipermail/mercurial-devel/attachments/20160201/e9b0bbde/attachment.pgp>