[Bug 5862] New: CA certs are not automatically loaded on macOS with 2.7.15 from python.org

[mercurial-bugs at mercurial-scm.org]

https://bz.mercurial-scm.org/show_bug.cgi?id=5862

            Bug ID: 5862
           Summary: CA certs are not automatically loaded on macOS with
                    2.7.15 from python.org
           Product: Mercurial
           Version: 4.6rc0
          Hardware: Macintosh
                OS: Mac OS
            Status: UNCONFIRMED
          Severity: feature
          Priority: wish
         Component: Mercurial
          Assignee: bugzilla at mercurial-scm.org
          Reporter: matt_harbison at yahoo.com
                CC: mercurial-devel at mercurial-scm.org

The *.pkg and `pip` installs work on 10.13.4, so this isn't critical; this is a
problem when building from source.  It works from source builds with 2.7.14,
but I upgraded to get TLS 1.2 support.

$ hg in
(an attempt was made to load CA certificates but none were loaded; see
https://mercurial-scm.org/wiki/SecureConnections for how to configure Mercurial
to avoid this error)
abort: error: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed
(_ssl.c:726)

I'm vaguely aware of weirdness with the system python vs python.org python, and
using a dummy PEM file to trigger system CA cert access, but I don't know all
the details.  Maybe nothing can be done here.

-- 
You are receiving this mail because:
You are on the CC list for the bug.