Official repo on https://selenic.com/hg is "insecure"

Matt Mackall mpm at selenic.com
Mon Jul 25 16:30:38 EDT 2016


On Mon, 2016-07-25 at 15:33 +0200, Mads Kiilerich wrote:
> The official repo on https://selenic.com/hg seems to be TLSv1 only - and 
> thus not supported by a default 3.9 installation.

The old server has now reached a state where it's a bird's nest of dependencies
and thus is very difficult to update. 

> I guess the only feasible solution is to take our own medicine and get 
> it upgraded - perhaps indirectly by moving the official repo to 
> mercurial-scm.org .

That is on our to-do list in any case, so is almost certainly the best way to do
it. But it won't be a complete fix as we'll need to redirect for quite a while
and redirects of https still require valid certs and compatible protocols.

-- 
Mathematics is the supreme nostalgia of our time.



More information about the Mercurial-devel mailing list