comparison mercurial/sslutil.py @ 44061:cbc5755df6bf

sslutil: migrate to hashutil.sha1 instead of hashlib.sha1

This is a straight-line replacement like the others, but I split it
out since it's used in a network context and I'm not sure this is
appropriate (we should probably drop support for sha1
fingerprints over TLS) and wanted this to be easily dropped.

Differential Revision: https://phab.mercurial-scm.org/D7850

44060:a61287a95dc3

    node,
    pycompat,
    util,
)
from .utils import (
    resourceutil,
    stringutil,
)

# Python 2.7.9+ overhauled the built-in SSL/TLS features of Python. It added

        return

    # If a certificate fingerprint is pinned, use it and only it to
    # validate the remote cert.
    peerfingerprints = {
        b'sha1': node.hex(hashlib.sha1(peercert).digest()),
        b'sha256': node.hex(hashlib.sha256(peercert).digest()),
        b'sha512': node.hex(hashlib.sha512(peercert).digest()),
    }

    def fmtfingerprint(s):

44061:cbc5755df6bf

    node,
    pycompat,
    util,
)
from .utils import (
    hashutil,
    resourceutil,
    stringutil,
)

# Python 2.7.9+ overhauled the built-in SSL/TLS features of Python. It added

        return

    # If a certificate fingerprint is pinned, use it and only it to
    # validate the remote cert.
    peerfingerprints = {
        b'sha1': node.hex(hashutil.sha1(peercert).digest()),
        b'sha256': node.hex(hashlib.sha256(peercert).digest()),
        b'sha512': node.hex(hashlib.sha512(peercert).digest()),
    }

    def fmtfingerprint(s):