Wagner Bruna <wbruna@softwareexpress.com.br> [Fri, 17 Jun 2011 18:24:54 -0300] rev 14668
help/hgignore: refer to the builtin help instead of external URLs
Mads Kiilerich <mads@kiilerich.com> [Sat, 18 Jun 2011 01:08:54 +0200] rev 14667
sslutil: make messages for Python without certificate handling more helpful
We now explain why there is no certificate to verify and do not give hints
about cacerts when they can't be used anyway.
Nicolas Bareil <nico@chdir.org> [Sat, 18 Jun 2011 01:03:03 +0200] rev 14666
sslutil: fall back to commonName when no dNSName in subjectAltName (issue2798)
Any entries in subjectAltName would prevent fallback to using commonName, but
RFC 2818 says:
If a subjectAltName extension of type dNSName is present, that MUST
be used as the identity. Otherwise, the (most specific) Common Name
field in the Subject field of the certificate MUST be used.
We now only consider dNSNames in subjectAltName.
(dNSName is known as 'DNS' in OpenSSL/Python.)
Matt Mackall <mpm@selenic.com> [Fri, 17 Jun 2011 15:43:50 -0500] rev 14665
merge with i18n