comparison tests/test-https.t @ 15997:a45516cb8d9f stable

sslutil: more helpful fingerprint mismatch message This will aid debugging for users of sites that renew certs.
author Matt Mackall <mpm@selenic.com>
date Thu, 26 Jan 2012 11:23:15 -0600
parents c3e958b50a22
children 093b75c7b44b
comparison
equal deleted inserted replaced
15996:0455463655e0 15997:a45516cb8d9f
223 $ hg -R copy-pull id https://localhost:$HGPORT/ --config web.cacerts= 223 $ hg -R copy-pull id https://localhost:$HGPORT/ --config web.cacerts=
224 5fed3813f7f5 224 5fed3813f7f5
225 225
226 - fails when cert doesn't match hostname (port is ignored) 226 - fails when cert doesn't match hostname (port is ignored)
227 $ hg -R copy-pull id https://localhost:$HGPORT1/ 227 $ hg -R copy-pull id https://localhost:$HGPORT1/
228 abort: invalid certificate for localhost with fingerprint 28:ff:71:bf:65:31:14:23:ad:62:92:b4:0e:31:99:18:fc:83:e3:9b 228 abort: certificate for localhost has unexpected fingerprint 28:ff:71:bf:65:31:14:23:ad:62:92:b4:0e:31:99:18:fc:83:e3:9b
229 (check hostfingerprint configuration)
229 [255] 230 [255]
230 231
231 - ignores that certificate doesn't match hostname 232 - ignores that certificate doesn't match hostname
232 $ hg -R copy-pull id https://127.0.0.1:$HGPORT/ 233 $ hg -R copy-pull id https://127.0.0.1:$HGPORT/
233 5fed3813f7f5 234 5fed3813f7f5