comparison mercurial/sslutil.py @ 29111:843df550b465

sslutil: check for ui.insecureconnections in sslkwargs

The end result of this function is the same. We now have a more
explicit return branch.

We still keep the old code looking at web.cacerts=! a few lines
below because we're still setting web.cacerts=! and need to react
to the variable. This will be removed in an upcoming patch.

29110:b197e2aba703

    # and CA certs don't come into play.
    hostfingerprint = ui.config('hostfingerprints', host)
    if hostfingerprint:
        return kws

    # dispatch sets web.cacerts=! when --insecure is used.
    cacerts = ui.config('web', 'cacerts')
    if cacerts == '!':
        return kws

    # If a value is set in the config, validate against a path and load
    # and require those certs.

29111:843df550b465

    # and CA certs don't come into play.
    hostfingerprint = ui.config('hostfingerprints', host)
    if hostfingerprint:
        return kws

    # The code below sets up CA verification arguments. If --insecure is
    # used, we don't take CAs into consideration, so return early.
    if ui.insecureconnections:
        return kws

    cacerts = ui.config('web', 'cacerts')
    # TODO remove check when we stop setting this config.
    if cacerts == '!':
        return kws

    # If a value is set in the config, validate against a path and load
    # and require those certs.