url: fix UnicodeDecodeError on certificate verification error SSLSocket.getpeercert() returns tuple containing unicode for 'subject'. Since Mercurial does't support IDN at all, it just returns error for non-ascii certname.

merge with stable

win32: add cacert.pem file to Inno Setup installer

test-mq-subrepo.t: skip test if svn not installed

mail: fix regression when parsing unset smtp.tls option

bash_completion: support record command

subrepo: fix svnsubrepo.dirty() checking of ignoreupdate (issue2499) The ignoreupdate flag to subrepo.dirty(), introduced in be7e8e9bc5e5, is correctly checked with this change.