Hg 1.7.3 push googlecode.com crash

[Augie Fackler]

On Jan 11, 2011, at 5:14 AM, Mads Kiilerich wrote:

> On 01/11/2011 09:33 AM, Gilles Moris wrote:
>> On Tuesday 11 January 2011 09:04:04 am Zoom.Quiet wrote:
>>> in Ubuntu 10.04.1 LTS
>>> when i push,warning: tangle.zoomquiet.googlecode.com certificate not
>>> verified (check web.cacerts config setting)
>>> 
>>> so i dump the *.googlecode.com.pem
>>> and conf. .hg/hgrc appended
>>> [web]
>>> cacerts = /home/zoomq/.zoomq/SSL/*.googlecode.com.pem
> 
> Interesting filename. I'm sure that will work without problems in 99% of your programs. But I'm also 99% sure that it eventually will cause some kind of trouble ;-)
> 
>>>   File "/usr/lib/pymodules/python2.6/mercurial/url.py", line 505, in
>>> _verifycert return _('certificate is for %s') % certname
>>> UnicodeDecodeError: 'ascii' codec can't decode byte 0xe6 in position
>>> 0: ordinal not in range(128)
>> 
>> The fix 00411a4fa1bb has just been pushed today in stable.
> 
> So far it is only in crew. And it will fix the crash but it will not make it work. It will correctly abort with a nice message.
> 
> DNS wildcards resolves multiple levels of subdomains, but certificate wildcards only apply to one subdomain level. https://tangle.zoomquiet.googlecode.com is thus not valid.

Our security guys told us otherwise, but did warn that most browsers don't implement it.

> 
> /Mads
> _______________________________________________
> Mercurial mailing list
> Mercurial at selenic.com
> http://selenic.com/mailman/listinfo/mercurial