SSL load_cert_crl_file "system lib" errors

Mads Kiilerich mads at kiilerich.com
Fri Jan 21 19:55:40 CST 2011


Philip Pemberton wrote, On 01/21/2011 10:19 PM:
> Hi,
>
> I've just installed a StartSSL certificate on my server, mainly to get 
> rid of the ever-present "SSL CA is not verified" alerts from Firefox, 
> Thunderbird and Mercurial. FFX and TBird are fine with my server's new 
> certificate, but Mercurial seems to have a problem...
>
> I copied StartSSL's CA key into /home/philpem/.hgfiles/cacerts.pem, 
> then added this to the head of my ~/.hgrc:
>
> [web]
> cacerts = /home/philpem/.hg/cacerts.pem

/home/philpem/.hgfiles/cacerts.pem vs /home/philpem/.hg/cacerts.pem ?

> OK... looks like Mercurial wants DER format certificates (not PEM 
> format).

No. Some of the input or assumptions of your reasoning must be invalid.

/Mads


More information about the Mercurial mailing list