| Tue, 19 Dec 2023 21:27:49 +0100 |
Pierre-Yves David |
pytype: ignore certifi import error
|
| Fri, 01 Sep 2023 00:09:55 +0200 |
Pierre-Yves David |
pycompat: drop usage of hasattr/getattr/setattr/delatt proxy
|
| Thu, 31 Aug 2023 23:56:15 +0200 |
Pierre-Yves David |
safehasattr: drop usage in favor of hasattr
|
| Thu, 02 Feb 2023 17:36:15 +0100 |
Pierre-Yves David |
safehasattr: pass attribute name as string instead of bytes
|
| Thu, 02 Feb 2023 17:36:07 +0100 |
Pierre-Yves David |
safehasattr: pass attribute name as string instead of bytes
|
| Wed, 12 Apr 2023 17:28:39 +0200 |
pacien |
sslutil: set context security level for legacy tls testing (issue6760)
stable
|
| Thu, 13 Apr 2023 11:28:48 +0200 |
pacien |
configitems: make devel.serverexactprotocol look dangerous
stable
|
| Wed, 13 Jul 2022 18:27:40 +0200 |
Ondrej Pohorelsky |
sslutil: another use proper attribute to select python 3.7+
|
| Tue, 12 Jul 2022 15:59:53 +0200 |
Mathias De Mare |
sslutil: use proper attribute to select python 3.7+
|
| Sat, 09 Apr 2022 14:41:55 +0200 |
Julien Cristau |
sslutil: support TLSV1_ALERT_PROTOCOL_VERSION reason code
|
| Sat, 09 Apr 2022 14:23:52 +0200 |
Julien Cristau |
sslutil: be less strict about which ciphers are allowed when using --insecure
|
| Sat, 09 Apr 2022 14:15:32 +0200 |
Julien Cristau |
sslutil: avoid deprecation warnings from python 3.10's ssl module
|
| Thu, 03 Mar 2022 17:34:00 +0100 |
Gregory Szorc |
py2: remove simple from __future__ statements
|
| Tue, 14 Dec 2021 20:13:10 -0500 |
Matt Harbison |
pytype: stop excluding ssutil.py
|
| Thu, 25 Mar 2021 18:02:08 +0100 |
Raphaël Gomès |
contributor: change mentions of mpm to olivia
|
| Sat, 13 Mar 2021 00:40:46 -0500 |
Matt Harbison |
typing: disable module attribute warnings for properly conditionalized code
stable
|
| Sat, 13 Mar 2021 00:38:59 -0500 |
Matt Harbison |
typing: disable import error warnings that are already handled
stable
|
| Tue, 01 Dec 2020 21:54:46 +0100 |
Joerg Sonnenberger |
node: import symbols explicitly
|
| Fri, 27 Nov 2020 17:03:29 -0500 |
Augie Fackler |
formating: upgrade to black 20.8b1
|
| Mon, 23 Nov 2020 16:20:02 -0800 |
Martin von Zweigbergk |
errors: introduce SecurityError and use it in a few places
|
| Mon, 01 Jun 2020 15:22:31 +0200 |
Manuel Jacob |
sslutil: fix comment to use inclusive or instead of exclusive or
|
| Mon, 01 Jun 2020 14:34:22 +0200 |
Manuel Jacob |
sslutil: propagate return value ssl.PROTOCOL_SSLv23 from protocolsettings()
|
| Mon, 01 Jun 2020 14:20:13 +0200 |
Manuel Jacob |
sslutil: stop storing protocol and options for SSLContext in settings dict
|
| Mon, 01 Jun 2020 14:07:06 +0200 |
Manuel Jacob |
sslutil: rename 'minimumprotocolui' -> 'minimumprotocol'
|
| Mon, 01 Jun 2020 03:51:54 +0200 |
Manuel Jacob |
sslutil: properly detect which TLS versions are supported by the ssl module
|
| Sun, 31 May 2020 22:31:49 +0200 |
Manuel Jacob |
sslutil: remove dead code (that failed if only TLS 1.0 is available)
|
| Sun, 31 May 2020 22:15:35 +0200 |
Manuel Jacob |
sslutil: remove dead code (that downgraded default minimum TLS version)
|
| Fri, 29 May 2020 22:47:58 +0200 |
Manuel Jacob |
sslutil: remove comment referring to unsupported legacy stacks
|
| Sun, 31 May 2020 12:07:17 +0200 |
Manuel Jacob |
sslutil: check for OpenSSL without TLS 1.0 support in one case
|
| Sun, 31 May 2020 11:10:21 +0200 |
Manuel Jacob |
sslutil: don't set minimum TLS version to 1.0 if 1.2 but not 1.1 is available
|
| Sun, 31 May 2020 11:41:03 +0200 |
Manuel Jacob |
sslutil: add FIXME about supportedprotocols possibly containing too many items
|
| Sun, 31 May 2020 10:47:38 +0200 |
Manuel Jacob |
sslutil: fix names of variables containing minimum protocol strings
|
| Sun, 31 May 2020 09:55:45 +0200 |
Manuel Jacob |
sslutil: stop returning argument as third return value of protocolsettings()
|
| Sat, 30 May 2020 03:23:58 +0200 |
Manuel Jacob |
sslutil: eliminate `_canloaddefaultcerts` by constant-folding code using it
|
| Fri, 29 May 2020 21:30:04 +0200 |
Manuel Jacob |
sslutil: eliminate `modernssl` by constant-folding code using it
|
| Fri, 29 May 2020 22:31:26 +0200 |
Manuel Jacob |
sslutil: remove comments referring to removed SSLContext emulation class
|
| Fri, 29 May 2020 21:18:22 +0200 |
Manuel Jacob |
sslutil: remove code checking for presence of ssl.SSLContext
|
| Sat, 30 May 2020 03:46:59 +0200 |
Manuel Jacob |
sslutil: set `_canloaddefaultcerts` to `True` if `ssl.SSLContext` is present
|
| Mon, 13 Jan 2020 17:16:54 -0500 |
Augie Fackler |
sslutil: migrate to hashutil.sha1 instead of hashlib.sha1
|
| Thu, 14 Nov 2019 11:52:22 -0800 |
Martin von Zweigbergk |
procutil: move mainfrozen() to new resourceutil.py
|
| Fri, 08 Nov 2019 11:19:20 -0800 |
Augie Fackler |
cleanup: remove pointless r-prefixes on single-quoted strings
|
| Tue, 08 Oct 2019 15:06:18 -0700 |
Martin von Zweigbergk |
cleanup: join string literals that are already on one line
|
| Sun, 06 Oct 2019 16:55:18 -0400 |
Gregory Szorc |
py3: manually import getattr where it is needed
|
| Sun, 06 Oct 2019 10:51:16 -0400 |
Augie Fackler |
cleanup: mark some ui.(status|note|warn|write) calls as not needing i18n
|
| Sun, 06 Oct 2019 09:48:39 -0400 |
Augie Fackler |
formatting: byteify all mercurial/ and hgext/ string literals
|
| Sun, 06 Oct 2019 09:45:02 -0400 |
Augie Fackler |
formatting: blacken the codebase
|
| Sat, 04 May 2019 23:31:42 -0400 |
Augie Fackler |
sslutil: add support for SSLKEYLOGFILE to wrapsocket
|
| Wed, 08 May 2019 16:09:50 -0400 |
Augie Fackler |
sslutil: fsencode path returned by certifi (issue6132)
stable
|
| Sat, 26 Jan 2019 14:00:42 -0800 |
Gregory Szorc |
sslutil: ensure serverhostname is bytes when formatting
|
| Sat, 26 Jan 2019 13:58:58 -0800 |
Gregory Szorc |
sslutil: use raw strings for exception reason compare
|
| Tue, 26 Jun 2018 10:36:23 -0400 |
Augie Fackler |
cleanup: migrate from re.escape to stringutil.reescape
|
| Fri, 27 Apr 2018 00:05:46 -0400 |
Augie Fackler |
sslutil: fix some edge cases in Python 3 support
|
| Sat, 14 Apr 2018 02:03:02 +0530 |
Pulkit Goyal |
py3: add b'' prefixes to make values bytes
|
| Sat, 24 Mar 2018 15:10:51 +0900 |
Yuya Nishihara |
procutil: bulk-replace function calls to point to new module
|
| Thu, 22 Mar 2018 21:56:20 +0900 |
Yuya Nishihara |
stringutil: bulk-replace call sites to point to new module
|
| Sun, 04 Mar 2018 21:16:36 -0500 |
Augie Fackler |
sslutil: some more forcebytes() on some exception messages
|
| Sun, 04 Mar 2018 21:15:37 -0500 |
Augie Fackler |
sslutil: sslcontext needs the cipher name as a sysstr
|
| Sun, 04 Mar 2018 18:03:55 -0500 |
Augie Fackler |
sslutil: lots of unicode/bytes cleanup
|
| Fri, 29 Dec 2017 05:25:27 +0530 |
Pulkit Goyal |
py3: use node.hex(h.digest()) instead of h.hexdigest()
|
| Sun, 10 Dec 2017 04:48:59 +0530 |
Pulkit Goyal |
py3: handle keyword arguments correctly in sslutil.py
|
| Sat, 14 Oct 2017 00:29:31 +0200 |
Boris Feld |
configitems: register the 'hostsecurity.*:fingerprints' config
|
| Thu, 12 Oct 2017 00:20:41 +0200 |
Boris Feld |
configitems: register the 'hostfingerprints' section
|
| Thu, 12 Oct 2017 23:34:34 -0700 |
Jun Wu |
codemod: use pycompat.isdarwin
|
| Thu, 12 Oct 2017 23:30:46 -0700 |
Jun Wu |
codemod: use pycompat.iswindows
|
| Wed, 12 Jul 2017 18:37:13 -0400 |
Matt Harbison |
sslutil: inform the user about how to fix an incomplete certificate chain
|
| Mon, 10 Jul 2017 21:09:46 -0700 |
Gregory Szorc |
sslutil: check for missing certificate and key files (issue5598)
|
| Fri, 10 Feb 2017 16:56:29 -0800 |
Martin von Zweigbergk |
cleanup: use set literals
|
| Wed, 10 May 2017 23:49:37 -0700 |
Gregory Szorc |
sslutil: tweak the legacy [hostfingerprints] warning message
|
| Wed, 10 May 2017 23:32:00 -0700 |
Gregory Szorc |
sslutil: remove conditional cipher code needed for Python 2.6
|
| Mon, 08 May 2017 09:30:26 -0700 |
Gregory Szorc |
sslutil: reference fingerprints config option properly (issue5559)
stable
|
| Wed, 29 Mar 2017 09:54:34 -0400 |
Matt Harbison |
sslutil: clarify internal documentation
|
| Thu, 09 Mar 2017 20:33:29 -0800 |
Gregory Szorc |
sslutil: issue warning when [hostfingerprint] is used
|
| Mon, 20 Feb 2017 18:40:42 +0530 |
Pulkit Goyal |
py3: use pycompat.fsencode() to convert __file__ to bytes
|
| Tue, 20 Dec 2016 00:20:07 +0530 |
Pulkit Goyal |
py3: replace sys.executable with pycompat.sysexecutable
|
| Mon, 19 Dec 2016 02:15:24 +0530 |
Pulkit Goyal |
py3: replace sys.platform with pycompat.sysplatform (part 1 of 2)
|
| Mon, 19 Dec 2016 00:16:52 +0530 |
Pulkit Goyal |
py3: replace os.name with pycompat.osname (part 1 of 2)
|
| Mon, 17 Oct 2016 23:16:55 +0200 |
Mads Kiilerich |
spelling: fixes of non-dictionary words
|
| Wed, 19 Oct 2016 18:06:14 +0200 |
Gábor Stefanik |
sslutil: guard against broken certifi installations (issue5406)
stable
|
| Tue, 13 Sep 2016 17:46:29 +0200 |
Pierre-Yves David |
ssl: handle a difference in SSLError with pypy (issue5348)
|
| Mon, 25 Jul 2016 12:00:55 -0700 |
Gregory Szorc |
sslutil: work around SSLContext.get_ca_certs bug on Windows (issue5313)
stable
|
| Tue, 19 Jul 2016 21:09:58 -0700 |
Gregory Szorc |
sslutil: improve messaging around unsupported protocols (issue5303)
stable
|
| Tue, 19 Jul 2016 20:30:29 -0700 |
Gregory Szorc |
sslutil: capture string string representation of protocol
stable
|
| Tue, 19 Jul 2016 20:16:51 -0700 |
Gregory Szorc |
sslutil: allow TLS 1.0 when --insecure is used
stable
|
| Mon, 18 Jul 2016 11:27:27 -0700 |
Gregory Szorc |
sslutil: more robustly detect protocol support
|
| Sun, 17 Jul 2016 11:03:08 -0700 |
Gregory Szorc |
sslutil: move comment about protocol constants
|
| Sun, 17 Jul 2016 10:59:32 -0700 |
Gregory Szorc |
sslutil: support defining cipher list
|
| Wed, 13 Jul 2016 21:49:17 -0700 |
Gregory Szorc |
sslutil: print a warning when using TLS 1.0 on legacy Python
|
| Wed, 13 Jul 2016 21:35:54 -0700 |
Gregory Szorc |
sslutil: require TLS 1.1+ when supported
|
| Thu, 14 Jul 2016 20:47:22 -0700 |
Gregory Szorc |
sslutil: config option to specify TLS protocol version
|
| Thu, 14 Jul 2016 20:07:10 -0700 |
Gregory Szorc |
sslutil: prevent CRIME
|
| Thu, 14 Jul 2016 19:56:39 -0700 |
Gregory Szorc |
sslutil: update comment about create_default_context()
|
| Thu, 14 Jul 2016 20:14:19 -0700 |
Gregory Szorc |
sslutil: implement wrapserversocket()
|
| Wed, 13 Jul 2016 19:33:52 -0700 |
Gregory Szorc |
sslutil: add assertion to prevent accidental CA usage on Windows
|
| Wed, 06 Jul 2016 22:53:22 -0700 |
Gregory Szorc |
sslutil: move context options flags to _hostsettings
|
| Wed, 06 Jul 2016 22:47:24 -0700 |
Gregory Szorc |
sslutil: move protocol determination to _hostsettings
|
| Mon, 11 Jul 2016 08:54:13 -0500 |
Matt Mackall |
merge with stable
|
| Wed, 06 Jul 2016 21:16:00 -0700 |
Gregory Szorc |
sslutil: try to find CA certficates in well-known locations
|
| Wed, 06 Jul 2016 20:46:05 -0700 |
Gregory Szorc |
sslutil: issue warning when unable to load certificates on OS X
|
| Mon, 04 Jul 2016 10:04:11 -0700 |
Gregory Szorc |
sslutil: handle default CA certificate loading on Windows
|
| Thu, 30 Jun 2016 19:54:12 -0700 |
Gregory Szorc |
sslutil: expand _defaultcacerts docstring to note calling assumptions
|
| Mon, 04 Jul 2016 10:00:56 -0700 |
Gregory Szorc |
sslutil: document the Apple OpenSSL cert trick
|
| Mon, 04 Jul 2016 09:58:45 -0700 |
Gregory Szorc |
sslutil: use certificates provided by certifi if available
|
| Fri, 01 Jul 2016 19:17:45 -0700 |
Gregory Szorc |
sslutil: don't attempt to find default CA certs file when told not to
|
| Fri, 01 Jul 2016 19:04:39 -0700 |
Gregory Szorc |
sslutil: pass ui to _defaultcacerts
|
| Fri, 01 Jul 2016 18:03:51 -0700 |
Gregory Szorc |
sslutil: change comment and logged message for found ca cert file
|
| Sat, 02 Jul 2016 09:41:40 -0700 |
Gregory Szorc |
sslutil: don't access message attribute in exception (issue5285)
stable
|
| Fri, 01 Jul 2016 16:02:56 -0500 |
Matt Mackall |
merge with stable
|
| Sun, 26 Jun 2016 19:34:48 -0700 |
Gregory Szorc |
sslutil: synchronize hostname matching logic with CPython
stable 3.8.4
|
| Wed, 29 Jun 2016 19:43:27 -0700 |
Gregory Szorc |
sslutil: emit warning when no CA certificates loaded
|
| Wed, 29 Jun 2016 19:38:24 -0700 |
Gregory Szorc |
sslutil: don't load default certificates when they aren't relevant
|
| Wed, 29 Jun 2016 19:37:38 -0700 |
Gregory Szorc |
sslutil: display a better error message when CA file loading fails
|
| Sat, 25 Jun 2016 07:26:43 -0700 |
Gregory Szorc |
sslutil: abort when unable to verify peer connection (BC)
|
| Sat, 25 Jun 2016 07:32:02 -0700 |
Gregory Szorc |
sslutil: remove out of place comment
|
| Tue, 14 Jun 2016 11:53:55 +0200 |
liscju |
i18n: translate abort messages
|
| Fri, 10 Jun 2016 00:12:33 -0400 |
Augie Fackler |
cleanup: replace uses of util.(md5|sha1|sha256|sha512) with hashlib.\1
|
| Tue, 07 Jun 2016 20:29:54 -0700 |
Gregory Szorc |
sslutil: per-host config option to define certificates
|
| Sat, 04 Jun 2016 11:16:08 -0700 |
Gregory Szorc |
sslutil: print the fingerprint from the last hash used
|
| Tue, 31 May 2016 19:21:08 -0700 |
Gregory Szorc |
sslutil: make cert fingerprints messages more actionable
|
| Mon, 30 May 2016 15:43:03 -0700 |
Gregory Szorc |
sslutil: refactor code for fingerprint matching
|
| Mon, 30 May 2016 15:42:39 -0700 |
Gregory Szorc |
sslutil: print SHA-256 fingerprint by default
|
| Mon, 30 May 2016 13:15:53 -0700 |
Gregory Szorc |
sslutil: move and change warning when cert verification is disabled
|
| Wed, 01 Jun 2016 19:57:20 -0700 |
Gregory Szorc |
sslutil: add devel.disableloaddefaultcerts to disable CA loading
|
| Mon, 30 May 2016 11:20:31 -0700 |
Gregory Szorc |
sslutil: store flag for whether cert verification is disabled
|
| Mon, 30 May 2016 11:19:43 -0700 |
Gregory Szorc |
sslutil: remove "strict" argument from validatesocket()
|
| Sat, 28 May 2016 12:58:46 -0700 |
Gregory Szorc |
sslutil: reference appropriate config section in messaging
|
| Sat, 28 May 2016 12:37:36 -0700 |
Gregory Szorc |
sslutil: allow fingerprints to be specified in [hostsecurity]
|
| Sat, 28 May 2016 11:58:28 -0700 |
Gregory Szorc |
sslutil: calculate host fingerprints from additional algorithms
|
| Sat, 28 May 2016 12:53:33 -0700 |
Gregory Szorc |
sslutil: move CA file processing into _hostsettings()
|
| Sat, 28 May 2016 11:41:21 -0700 |
Gregory Szorc |
sslutil: move SSLContext.verify_mode value into _hostsettings
|
| Sat, 28 May 2016 11:12:02 -0700 |
Gregory Szorc |
sslutil: introduce a function for determining host-specific settings
|
| Wed, 25 May 2016 19:57:31 -0700 |
Gregory Szorc |
sslutil: remove sslkwargs() (API)
|
| Wed, 25 May 2016 19:52:02 -0700 |
Gregory Szorc |
sslutil: move sslkwargs logic into internal function (API)
|
| Wed, 25 May 2016 19:43:22 -0700 |
Gregory Szorc |
sslutil: remove ui from sslkwargs (API)
|
| Sun, 15 May 2016 11:50:49 -0700 |
Gregory Szorc |
sslutil: remove redundant check of sslsocket.cipher()
|
| Sun, 15 May 2016 11:38:38 -0700 |
Gregory Szorc |
sslutil: convert socket validation from a class to a function (API)
|
| Sun, 15 May 2016 11:32:11 -0700 |
Gregory Szorc |
sslutil: store and use hostname and ui in socket instance
|
| Sun, 15 May 2016 11:25:07 -0700 |
Gregory Szorc |
sslutil: use a dict for hanging hg state off the wrapped socket
|
| Thu, 05 May 2016 19:10:18 -0700 |
Gregory Szorc |
sslutil: require serverhostname argument (API)
|
| Thu, 05 May 2016 00:46:31 -0700 |
Gregory Szorc |
sslutil: stop checking for web.cacerts=! (BC)
|
| Thu, 05 May 2016 00:38:18 -0700 |
Gregory Szorc |
sslutil: use CA loaded state to drive validation logic
|
| Thu, 05 May 2016 00:37:28 -0700 |
Gregory Szorc |
sslutil: handle ui.insecureconnections in validator
|
| Thu, 05 May 2016 00:35:45 -0700 |
Gregory Szorc |
sslutil: check for ui.insecureconnections in sslkwargs
|
| Thu, 05 May 2016 00:32:43 -0700 |
Gregory Szorc |
sslutil: make sslkwargs code even more explicit
|
| Wed, 04 May 2016 23:38:34 -0700 |
Gregory Szorc |
sslutil: move code examining _canloaddefaultcerts out of _defaultcacerts
|
| Wed, 04 May 2016 23:01:49 -0700 |
Gregory Szorc |
sslutil: further refactor sslkwargs
|
| Thu, 05 May 2016 00:31:11 -0700 |
Gregory Szorc |
sslutil: document and slightly refactor sslkwargs
|
| Sat, 30 Apr 2016 09:26:47 -0700 |
Gregory Szorc |
sslutil: restore old behavior not requiring a hostname argument (issue5210)
stable
|
| Sun, 10 Apr 2016 11:02:58 -0700 |
Gregory Szorc |
sslutil: document and slightly refactor validation logic
|
| Sun, 10 Apr 2016 11:00:41 -0700 |
Gregory Szorc |
sslutil: require a server hostname when wrapping sockets (API)
|
| Sun, 10 Apr 2016 10:59:45 -0700 |
Gregory Szorc |
sslutil: move and document verify_mode assignment
|
| Sun, 27 Mar 2016 13:13:19 -0700 |
Gregory Szorc |
sslutil: add docstring to wrapsocket()
|
| Sun, 27 Mar 2016 11:39:39 -0700 |
Gregory Szorc |
sslutil: remove indentation in wrapsocket declaration
|
| Sun, 27 Mar 2016 14:18:32 -0700 |
Gregory Szorc |
sslutil: always use SSLContext
|
| Sun, 27 Mar 2016 14:08:52 -0700 |
Gregory Szorc |
sslutil: move _canloaddefaultcerts logic
|
| Sun, 27 Mar 2016 13:50:34 -0700 |
Gregory Szorc |
sslutil: implement SSLContext class
|
| Sun, 27 Mar 2016 10:47:24 -0700 |
Gregory Szorc |
sslutil: store OP_NO_SSL* constants in module scope
|
| Sun, 27 Mar 2016 14:07:06 -0700 |
Gregory Szorc |
sslutil: better document state of security/ssl module
|
| Sat, 19 Mar 2016 10:10:09 -0700 |
Gregory Szorc |
sslutil: use preferred formatting for import syntax
|
| Sun, 13 Mar 2016 14:03:58 -0700 |
Gregory Szorc |
sslutil: allow multiple fingerprints per host
|
| Fri, 08 Jan 2016 16:27:25 +0100 |
Gábor Stefanik |
sslutil: fix reversed logic (issue5034)
stable
|
| Tue, 29 Sep 2015 16:17:32 -0700 |
Gregory Szorc |
sslutil: expose attribute indicating whether SNI is supported
|
| Thu, 08 Oct 2015 12:55:45 -0700 |
Pierre-Yves David |
error: get Abort from 'error' instead of 'util'
|
| Sat, 08 Aug 2015 19:56:22 -0700 |
Gregory Szorc |
sslutil: use absolute_import
|
| Fri, 05 Jun 2015 21:45:44 +0900 |
Yuya Nishihara |
ssl: remove CERT_REQUIRED constant that was necessary for compatibility
|
| Fri, 05 Jun 2015 21:40:59 +0900 |
Yuya Nishihara |
ssl: drop try-except clause that was necessary for ancient Python
|
| Fri, 05 Jun 2015 21:37:46 +0900 |
Yuya Nishihara |
ssl: drop support for Python < 2.6, require ssl module
|
| Fri, 05 Jun 2015 21:25:28 +0900 |
Yuya Nishihara |
ssl: rename ssl_wrap_socket() to conform to our naming convention
|
| Thu, 07 May 2015 17:15:24 +0900 |
Yuya Nishihara |
ssl: prompt passphrase of client key file via ui.getpass() (issue4648)
|
| Sat, 04 Apr 2015 14:56:18 +0900 |
Yuya Nishihara |
ssl: resolve symlink before checking for Apple python executable (issue4588)
|
| Thu, 26 Feb 2015 22:54:13 +0900 |
Yuya Nishihara |
ssl: load CA certificates from system's store by default on Python 2.7.9
|
| Wed, 04 Mar 2015 23:27:04 +0900 |
Yuya Nishihara |
ssl: set explicit symbol "!" to web.cacerts to disable SSL verification (BC)
|
| Wed, 04 Mar 2015 22:27:01 +0900 |
Yuya Nishihara |
ssl: extract function that returns dummycert path on Apple python
|
| Wed, 14 Jan 2015 15:46:21 -0500 |
Augie Fackler |
sslutil: drop defunct ssl version constants
|
| Wed, 14 Jan 2015 15:46:00 -0500 |
Augie Fackler |
sslutil: use saner TLS settings on Python 2.7.9
|
| Wed, 14 Jan 2015 15:31:16 -0500 |
Augie Fackler |
sslutil: drop support for clients of sslutil specifying a TLS version
|
| Mon, 12 Jan 2015 18:01:20 -0700 |
Alex Orange |
https: support tls sni (server name indication) for https urls (issue3090)
|
| Tue, 21 Oct 2014 17:01:23 -0400 |
Augie Fackler |
sslutil: only support TLS (BC)
stable
|
| Fri, 17 Oct 2014 18:56:12 +0200 |
Mads Kiilerich |
ssl: only use the dummy cert hack if using an Apple Python (issue4410)
|
| Fri, 26 Sep 2014 02:19:48 +0200 |
Mads Kiilerich |
ssl: on OS X, use a dummy cert to trick Python/OpenSSL to use system CA certs
|
| Fri, 26 Sep 2014 02:19:47 +0200 |
Mads Kiilerich |
ssl: refactor sslkwargs - move things around a bit, preparing for next change
|
| Fri, 20 Sep 2013 09:15:43 -0400 |
Augie Fackler |
sslutil: make keyfile and certfile arguments consistent between 2.6+ and 2.5-
|
| Thu, 19 Sep 2013 16:29:00 -0400 |
Augie Fackler |
sslutil: add a config knob to support TLS (default) or SSLv23 (bc) (issue4038)
|
| Wed, 18 Sep 2013 14:40:17 -0400 |
Augie Fackler |
sslutil: backed out changeset 074bd02352c0 (issue4038)
stable
|
| Wed, 24 Jul 2013 14:51:13 -0400 |
Augie Fackler |
sslutil: force SSLv3 on Python 2.6 and later (issue3905)
stable
|
| Tue, 26 Mar 2013 02:28:10 +0900 |
FUJIWARA Katsunori |
sslutil: abort if peer certificate is not verified for secure use
|
| Fri, 05 Apr 2013 12:20:14 -0500 |
Matt Mackall |
sslutil: try harder to avoid getpeercert problems
|
| Mon, 09 Apr 2012 14:36:16 -0700 |
Steven Stallion |
ui: optionally quiesce ssl verification warnings on python 2.5
|
| Thu, 26 Jan 2012 11:23:15 -0600 |
Matt Mackall |
sslutil: more helpful fingerprint mismatch message
stable
|
| Mon, 09 Jan 2012 14:56:05 +0100 |
Mads Kiilerich |
sslutil: abort properly if no certificate received for https connection
|
| Mon, 09 Jan 2012 14:43:25 +0100 |
Mads Kiilerich |
sslutil: work around validator crash getting certificate on failed sockets
|
| Mon, 09 Jan 2012 14:43:24 +0100 |
Mads Kiilerich |
sslutil: reorder validator code to make it more readable
|
| Mon, 09 Jan 2012 14:43:24 +0100 |
Mads Kiilerich |
sslutil: show fingerprint when cacerts validation fails
|
| Mon, 09 Jan 2012 14:43:23 +0100 |
Mads Kiilerich |
sslutil: handle setups without .getpeercert() early in the validator
|
| Mon, 09 Jan 2012 14:43:15 +0100 |
Mads Kiilerich |
sslutil: verify that wrap_socket really wrapped the socket
|
| Tue, 27 Sep 2011 18:51:10 +0200 |
Mads Kiilerich |
sslutil: abort when ssl module is needed but not found
|
| Sat, 18 Jun 2011 01:08:54 +0200 |
Mads Kiilerich |
sslutil: make messages for Python without certificate handling more helpful
|
| Sat, 18 Jun 2011 01:03:03 +0200 |
Nicolas Bareil |
sslutil: fall back to commonName when no dNSName in subjectAltName (issue2798)
|
| Tue, 14 Jun 2011 13:31:32 +1000 |
Stephen Thorne |
sslutil: Restore missing imports of socket and httplib to sslutil
|
| Wed, 04 May 2011 22:08:55 -0500 |
Augie Fackler |
sslutil: extracted ssl methods from httpsconnection in url.py
|
