comparison mercurial/sslutil.py @ 29487:cdcb5747dc88

sslutil: document the Apple OpenSSL cert trick

This is sort of documented in _plainapplypython()'s docstring. But
it helps to be explicit in security code.

29486:a62c00f6dd04

        ui.debug('using ca certificates from certifi\n')
        return certs
    except ImportError:
        pass

    if _plainapplepython():
        dummycert = os.path.join(os.path.dirname(__file__), 'dummycert.pem')
        if os.path.exists(dummycert):
            return dummycert

29487:cdcb5747dc88

        ui.debug('using ca certificates from certifi\n')
        return certs
    except ImportError:
        pass

    # Apple's OpenSSL has patches that allow a specially constructed certificate
    # to load the system CA store. If we're running on Apple Python, use this
    # trick.
    if _plainapplepython():
        dummycert = os.path.join(os.path.dirname(__file__), 'dummycert.pem')
        if os.path.exists(dummycert):
            return dummycert