SSL load_cert_crl_file "system lib" errors

Steve Borho steve at
Fri Jan 21 16:32:56 CST 2011

On Fri, Jan 21, 2011 at 3:19 PM, Philip Pemberton <lists at> wrote:
> Hi,
> I've just installed a StartSSL certificate on my server, mainly to get rid
> of the ever-present "SSL CA is not verified" alerts from Firefox,
> Thunderbird and Mercurial. FFX and TBird are fine with my server's new
> certificate, but Mercurial seems to have a problem...
> I copied StartSSL's CA key into /home/philpem/.hgfiles/cacerts.pem, then
> added this to the head of my ~/.hgrc:
> [web]
> cacerts = /home/philpem/.hg/cacerts.pem
> Now if I try to push or pull...
> philpem at cheetah:/var/www/isis$ hg push
> abort: error: _ssl.c:328: error:0B084002:x509 certificate
> routines:X509_load_cert_crl_file:system lib

This is OpenSSL's idea of:  Unable to parse certificate file.

Steve Borho

More information about the Mercurial mailing list