comparison doc/hgrc.5.txt @ 8847:7951f385fcb7

url: support client certificate files over HTTPS (issue643) This extends the httpshandler with the means to utilise the auth section to provide it with a PEM encoded certificate key file and certificate chain file. This works also with sites that both require client certificate authentication and basic or digest password authentication, although the latter situation may require the user to enter the PEM password multiple times.
author Henrik Stuart <hg@hstuart.dk>
date Sat, 20 Jun 2009 10:58:57 +0200
parents ac92775b3b80
children 75cc02e7f672
comparison
equal deleted inserted replaced
8846:b30775386d40 8847:7951f385fcb7
140 foo.prefix = hg.intevation.org/mercurial 140 foo.prefix = hg.intevation.org/mercurial
141 foo.username = foo 141 foo.username = foo
142 foo.password = bar 142 foo.password = bar
143 foo.schemes = http https 143 foo.schemes = http https
144 144
145 bar.prefix = secure.example.org
146 bar.key = path/to/file.key
147 bar.cert = path/to/file.cert
148 bar.schemes = https
149
145 Supported arguments: 150 Supported arguments:
146 151
147 prefix;; 152 prefix;;
148 Either "++\*++" or a URI prefix with or without the scheme part. 153 Either "++\*++" or a URI prefix with or without the scheme part.
149 The authentication entry with the longest matching prefix is used 154 The authentication entry with the longest matching prefix is used
150 (where "++*++" matches everything and counts as a match of length 155 (where "++*++" matches everything and counts as a match of length
151 1). If the prefix doesn't include a scheme, the match is performed 156 1). If the prefix doesn't include a scheme, the match is performed
152 against the URI with its scheme stripped as well, and the schemes 157 against the URI with its scheme stripped as well, and the schemes
153 argument, q.v., is then subsequently consulted. 158 argument, q.v., is then subsequently consulted.
154 username;; 159 username;;
155 Username to authenticate with. 160 Optional. Username to authenticate with. If not given, and the
161 remote site requires basic or digest authentication, the user
162 will be prompted for it.
156 password;; 163 password;;
157 Optional. Password to authenticate with. If not given the user 164 Optional. Password to authenticate with. If not given, and the
165 remote site requires basic or digest authentication, the user
158 will be prompted for it. 166 will be prompted for it.
167 key;;
168 Optional. PEM encoded client certificate key file.
169 cert;;
170 Optional. PEM encoded client certificate chain file.
159 schemes;; 171 schemes;;
160 Optional. Space separated list of URI schemes to use this 172 Optional. Space separated list of URI schemes to use this
161 authentication entry with. Only used if the prefix doesn't include 173 authentication entry with. Only used if the prefix doesn't include
162 a scheme. Supported schemes are http and https. They will match 174 a scheme. Supported schemes are http and https. They will match
163 static-http and static-https respectively, as well. 175 static-http and static-https respectively, as well.