Subject alternative names not supported?
Alexandros Karypidis
akarypid at yahoo.gr
Thu Jan 13 14:16:19 CST 2011
Hello,
I've upgraded to Mercurial 1.7.3 and found that Mercurial now validates
certificates. I installed my CA certificate in .hg/hgrc and now I get:
abort: host.vpn.mydomain.com certificate error: certificate is for
host.internal.mydomain.com
The problem is that hosts have a different name for their VPN interface
than on the intranet. For that reason, certificates are issued with the
VPN hostname as a subject alternative name (using X509v3). However,
Mercurial seems to ignore this.
Is there a way around this? Will subject alternative names be supproted
in the next version?
More information about the Mercurial
mailing list