log mercurial/sslutil.py @ 29341:0d83ad967bf8

age author description
Fri, 10 Jun 2016 00:12:33 -0400 Augie Fackler cleanup: replace uses of util.(md5|sha1|sha256|sha512) with hashlib.\1
Tue, 07 Jun 2016 20:29:54 -0700 Gregory Szorc sslutil: per-host config option to define certificates
Sat, 04 Jun 2016 11:16:08 -0700 Gregory Szorc sslutil: print the fingerprint from the last hash used
Tue, 31 May 2016 19:21:08 -0700 Gregory Szorc sslutil: make cert fingerprints messages more actionable
Mon, 30 May 2016 15:43:03 -0700 Gregory Szorc sslutil: refactor code for fingerprint matching
Mon, 30 May 2016 15:42:39 -0700 Gregory Szorc sslutil: print SHA-256 fingerprint by default
Mon, 30 May 2016 13:15:53 -0700 Gregory Szorc sslutil: move and change warning when cert verification is disabled
Wed, 01 Jun 2016 19:57:20 -0700 Gregory Szorc sslutil: add devel.disableloaddefaultcerts to disable CA loading
Mon, 30 May 2016 11:20:31 -0700 Gregory Szorc sslutil: store flag for whether cert verification is disabled
Mon, 30 May 2016 11:19:43 -0700 Gregory Szorc sslutil: remove "strict" argument from validatesocket()
Sat, 28 May 2016 12:58:46 -0700 Gregory Szorc sslutil: reference appropriate config section in messaging
Sat, 28 May 2016 12:37:36 -0700 Gregory Szorc sslutil: allow fingerprints to be specified in [hostsecurity]
Sat, 28 May 2016 11:58:28 -0700 Gregory Szorc sslutil: calculate host fingerprints from additional algorithms
Sat, 28 May 2016 12:53:33 -0700 Gregory Szorc sslutil: move CA file processing into _hostsettings()
Sat, 28 May 2016 11:41:21 -0700 Gregory Szorc sslutil: move SSLContext.verify_mode value into _hostsettings
Sat, 28 May 2016 11:12:02 -0700 Gregory Szorc sslutil: introduce a function for determining host-specific settings
Wed, 25 May 2016 19:57:31 -0700 Gregory Szorc sslutil: remove sslkwargs() (API)
Wed, 25 May 2016 19:52:02 -0700 Gregory Szorc sslutil: move sslkwargs logic into internal function (API)
Wed, 25 May 2016 19:43:22 -0700 Gregory Szorc sslutil: remove ui from sslkwargs (API)
Sun, 15 May 2016 11:50:49 -0700 Gregory Szorc sslutil: remove redundant check of sslsocket.cipher()
Sun, 15 May 2016 11:38:38 -0700 Gregory Szorc sslutil: convert socket validation from a class to a function (API)
Sun, 15 May 2016 11:32:11 -0700 Gregory Szorc sslutil: store and use hostname and ui in socket instance
Sun, 15 May 2016 11:25:07 -0700 Gregory Szorc sslutil: use a dict for hanging hg state off the wrapped socket
Thu, 05 May 2016 19:10:18 -0700 Gregory Szorc sslutil: require serverhostname argument (API)
Thu, 05 May 2016 00:46:31 -0700 Gregory Szorc sslutil: stop checking for web.cacerts=! (BC)
Thu, 05 May 2016 00:38:18 -0700 Gregory Szorc sslutil: use CA loaded state to drive validation logic
Thu, 05 May 2016 00:37:28 -0700 Gregory Szorc sslutil: handle ui.insecureconnections in validator
Thu, 05 May 2016 00:35:45 -0700 Gregory Szorc sslutil: check for ui.insecureconnections in sslkwargs
Thu, 05 May 2016 00:32:43 -0700 Gregory Szorc sslutil: make sslkwargs code even more explicit
Wed, 04 May 2016 23:38:34 -0700 Gregory Szorc sslutil: move code examining _canloaddefaultcerts out of _defaultcacerts
Wed, 04 May 2016 23:01:49 -0700 Gregory Szorc sslutil: further refactor sslkwargs
Thu, 05 May 2016 00:31:11 -0700 Gregory Szorc sslutil: document and slightly refactor sslkwargs
Sat, 30 Apr 2016 09:26:47 -0700 Gregory Szorc sslutil: restore old behavior not requiring a hostname argument (issue5210) stable
Sun, 10 Apr 2016 11:02:58 -0700 Gregory Szorc sslutil: document and slightly refactor validation logic
Sun, 10 Apr 2016 11:00:41 -0700 Gregory Szorc sslutil: require a server hostname when wrapping sockets (API)
Sun, 10 Apr 2016 10:59:45 -0700 Gregory Szorc sslutil: move and document verify_mode assignment
Sun, 27 Mar 2016 13:13:19 -0700 Gregory Szorc sslutil: add docstring to wrapsocket()
Sun, 27 Mar 2016 11:39:39 -0700 Gregory Szorc sslutil: remove indentation in wrapsocket declaration
Sun, 27 Mar 2016 14:18:32 -0700 Gregory Szorc sslutil: always use SSLContext
Sun, 27 Mar 2016 14:08:52 -0700 Gregory Szorc sslutil: move _canloaddefaultcerts logic
Sun, 27 Mar 2016 13:50:34 -0700 Gregory Szorc sslutil: implement SSLContext class
Sun, 27 Mar 2016 10:47:24 -0700 Gregory Szorc sslutil: store OP_NO_SSL* constants in module scope
Sun, 27 Mar 2016 14:07:06 -0700 Gregory Szorc sslutil: better document state of security/ssl module
Sat, 19 Mar 2016 10:10:09 -0700 Gregory Szorc sslutil: use preferred formatting for import syntax
Sun, 13 Mar 2016 14:03:58 -0700 Gregory Szorc sslutil: allow multiple fingerprints per host
Fri, 08 Jan 2016 16:27:25 +0100 Gábor Stefanik sslutil: fix reversed logic (issue5034) stable
Tue, 29 Sep 2015 16:17:32 -0700 Gregory Szorc sslutil: expose attribute indicating whether SNI is supported
Thu, 08 Oct 2015 12:55:45 -0700 Pierre-Yves David error: get Abort from 'error' instead of 'util'
Sat, 08 Aug 2015 19:56:22 -0700 Gregory Szorc sslutil: use absolute_import
Fri, 05 Jun 2015 21:45:44 +0900 Yuya Nishihara ssl: remove CERT_REQUIRED constant that was necessary for compatibility
Fri, 05 Jun 2015 21:40:59 +0900 Yuya Nishihara ssl: drop try-except clause that was necessary for ancient Python
Fri, 05 Jun 2015 21:37:46 +0900 Yuya Nishihara ssl: drop support for Python < 2.6, require ssl module
Fri, 05 Jun 2015 21:25:28 +0900 Yuya Nishihara ssl: rename ssl_wrap_socket() to conform to our naming convention
Thu, 07 May 2015 17:15:24 +0900 Yuya Nishihara ssl: prompt passphrase of client key file via ui.getpass() (issue4648)
Sat, 04 Apr 2015 14:56:18 +0900 Yuya Nishihara ssl: resolve symlink before checking for Apple python executable (issue4588)
Thu, 26 Feb 2015 22:54:13 +0900 Yuya Nishihara ssl: load CA certificates from system's store by default on Python 2.7.9
Wed, 04 Mar 2015 23:27:04 +0900 Yuya Nishihara ssl: set explicit symbol "!" to web.cacerts to disable SSL verification (BC)
Wed, 04 Mar 2015 22:27:01 +0900 Yuya Nishihara ssl: extract function that returns dummycert path on Apple python
Wed, 14 Jan 2015 15:46:21 -0500 Augie Fackler sslutil: drop defunct ssl version constants
Wed, 14 Jan 2015 15:46:00 -0500 Augie Fackler sslutil: use saner TLS settings on Python 2.7.9