| Wed, 06 Jul 2016 21:16:00 -0700 |
Gregory Szorc |
sslutil: try to find CA certficates in well-known locations
|
file |
diff |
annotate
|
| Wed, 06 Jul 2016 20:46:05 -0700 |
Gregory Szorc |
sslutil: issue warning when unable to load certificates on OS X
|
file |
diff |
annotate
|
| Mon, 04 Jul 2016 10:04:11 -0700 |
Gregory Szorc |
sslutil: handle default CA certificate loading on Windows
|
file |
diff |
annotate
|
| Thu, 30 Jun 2016 19:54:12 -0700 |
Gregory Szorc |
sslutil: expand _defaultcacerts docstring to note calling assumptions
|
file |
diff |
annotate
|
| Mon, 04 Jul 2016 10:00:56 -0700 |
Gregory Szorc |
sslutil: document the Apple OpenSSL cert trick
|
file |
diff |
annotate
|
| Mon, 04 Jul 2016 09:58:45 -0700 |
Gregory Szorc |
sslutil: use certificates provided by certifi if available
|
file |
diff |
annotate
|
| Fri, 01 Jul 2016 19:17:45 -0700 |
Gregory Szorc |
sslutil: don't attempt to find default CA certs file when told not to
|
file |
diff |
annotate
|
| Fri, 01 Jul 2016 19:04:39 -0700 |
Gregory Szorc |
sslutil: pass ui to _defaultcacerts
|
file |
diff |
annotate
|
| Fri, 01 Jul 2016 18:03:51 -0700 |
Gregory Szorc |
sslutil: change comment and logged message for found ca cert file
|
file |
diff |
annotate
|
| Sat, 02 Jul 2016 09:41:40 -0700 |
Gregory Szorc |
sslutil: don't access message attribute in exception (issue5285)
stable
|
file |
diff |
annotate
|
| Fri, 01 Jul 2016 16:02:56 -0500 |
Matt Mackall |
merge with stable
|
file |
diff |
annotate
|
| Sun, 26 Jun 2016 19:34:48 -0700 |
Gregory Szorc |
sslutil: synchronize hostname matching logic with CPython
stable 3.8.4
|
file |
diff |
annotate
|
| Wed, 29 Jun 2016 19:43:27 -0700 |
Gregory Szorc |
sslutil: emit warning when no CA certificates loaded
|
file |
diff |
annotate
|
| Wed, 29 Jun 2016 19:38:24 -0700 |
Gregory Szorc |
sslutil: don't load default certificates when they aren't relevant
|
file |
diff |
annotate
|
| Wed, 29 Jun 2016 19:37:38 -0700 |
Gregory Szorc |
sslutil: display a better error message when CA file loading fails
|
file |
diff |
annotate
|
| Sat, 25 Jun 2016 07:26:43 -0700 |
Gregory Szorc |
sslutil: abort when unable to verify peer connection (BC)
|
file |
diff |
annotate
|
| Sat, 25 Jun 2016 07:32:02 -0700 |
Gregory Szorc |
sslutil: remove out of place comment
|
file |
diff |
annotate
|
| Tue, 14 Jun 2016 11:53:55 +0200 |
liscju |
i18n: translate abort messages
|
file |
diff |
annotate
|
| Fri, 10 Jun 2016 00:12:33 -0400 |
Augie Fackler |
cleanup: replace uses of util.(md5|sha1|sha256|sha512) with hashlib.\1
|
file |
diff |
annotate
|
| Tue, 07 Jun 2016 20:29:54 -0700 |
Gregory Szorc |
sslutil: per-host config option to define certificates
|
file |
diff |
annotate
|
| Sat, 04 Jun 2016 11:16:08 -0700 |
Gregory Szorc |
sslutil: print the fingerprint from the last hash used
|
file |
diff |
annotate
|
| Tue, 31 May 2016 19:21:08 -0700 |
Gregory Szorc |
sslutil: make cert fingerprints messages more actionable
|
file |
diff |
annotate
|
| Mon, 30 May 2016 15:43:03 -0700 |
Gregory Szorc |
sslutil: refactor code for fingerprint matching
|
file |
diff |
annotate
|
| Mon, 30 May 2016 15:42:39 -0700 |
Gregory Szorc |
sslutil: print SHA-256 fingerprint by default
|
file |
diff |
annotate
|
| Mon, 30 May 2016 13:15:53 -0700 |
Gregory Szorc |
sslutil: move and change warning when cert verification is disabled
|
file |
diff |
annotate
|
| Wed, 01 Jun 2016 19:57:20 -0700 |
Gregory Szorc |
sslutil: add devel.disableloaddefaultcerts to disable CA loading
|
file |
diff |
annotate
|
| Mon, 30 May 2016 11:20:31 -0700 |
Gregory Szorc |
sslutil: store flag for whether cert verification is disabled
|
file |
diff |
annotate
|
| Mon, 30 May 2016 11:19:43 -0700 |
Gregory Szorc |
sslutil: remove "strict" argument from validatesocket()
|
file |
diff |
annotate
|
| Sat, 28 May 2016 12:58:46 -0700 |
Gregory Szorc |
sslutil: reference appropriate config section in messaging
|
file |
diff |
annotate
|
| Sat, 28 May 2016 12:37:36 -0700 |
Gregory Szorc |
sslutil: allow fingerprints to be specified in [hostsecurity]
|
file |
diff |
annotate
|
| Sat, 28 May 2016 11:58:28 -0700 |
Gregory Szorc |
sslutil: calculate host fingerprints from additional algorithms
|
file |
diff |
annotate
|
| Sat, 28 May 2016 12:53:33 -0700 |
Gregory Szorc |
sslutil: move CA file processing into _hostsettings()
|
file |
diff |
annotate
|
| Sat, 28 May 2016 11:41:21 -0700 |
Gregory Szorc |
sslutil: move SSLContext.verify_mode value into _hostsettings
|
file |
diff |
annotate
|
| Sat, 28 May 2016 11:12:02 -0700 |
Gregory Szorc |
sslutil: introduce a function for determining host-specific settings
|
file |
diff |
annotate
|
| Wed, 25 May 2016 19:57:31 -0700 |
Gregory Szorc |
sslutil: remove sslkwargs() (API)
|
file |
diff |
annotate
|
| Wed, 25 May 2016 19:52:02 -0700 |
Gregory Szorc |
sslutil: move sslkwargs logic into internal function (API)
|
file |
diff |
annotate
|
| Wed, 25 May 2016 19:43:22 -0700 |
Gregory Szorc |
sslutil: remove ui from sslkwargs (API)
|
file |
diff |
annotate
|
| Sun, 15 May 2016 11:50:49 -0700 |
Gregory Szorc |
sslutil: remove redundant check of sslsocket.cipher()
|
file |
diff |
annotate
|
| Sun, 15 May 2016 11:38:38 -0700 |
Gregory Szorc |
sslutil: convert socket validation from a class to a function (API)
|
file |
diff |
annotate
|
| Sun, 15 May 2016 11:32:11 -0700 |
Gregory Szorc |
sslutil: store and use hostname and ui in socket instance
|
file |
diff |
annotate
|
| Sun, 15 May 2016 11:25:07 -0700 |
Gregory Szorc |
sslutil: use a dict for hanging hg state off the wrapped socket
|
file |
diff |
annotate
|
| Thu, 05 May 2016 19:10:18 -0700 |
Gregory Szorc |
sslutil: require serverhostname argument (API)
|
file |
diff |
annotate
|
| Thu, 05 May 2016 00:46:31 -0700 |
Gregory Szorc |
sslutil: stop checking for web.cacerts=! (BC)
|
file |
diff |
annotate
|
| Thu, 05 May 2016 00:38:18 -0700 |
Gregory Szorc |
sslutil: use CA loaded state to drive validation logic
|
file |
diff |
annotate
|
| Thu, 05 May 2016 00:37:28 -0700 |
Gregory Szorc |
sslutil: handle ui.insecureconnections in validator
|
file |
diff |
annotate
|
| Thu, 05 May 2016 00:35:45 -0700 |
Gregory Szorc |
sslutil: check for ui.insecureconnections in sslkwargs
|
file |
diff |
annotate
|
| Thu, 05 May 2016 00:32:43 -0700 |
Gregory Szorc |
sslutil: make sslkwargs code even more explicit
|
file |
diff |
annotate
|
| Wed, 04 May 2016 23:38:34 -0700 |
Gregory Szorc |
sslutil: move code examining _canloaddefaultcerts out of _defaultcacerts
|
file |
diff |
annotate
|
| Wed, 04 May 2016 23:01:49 -0700 |
Gregory Szorc |
sslutil: further refactor sslkwargs
|
file |
diff |
annotate
|
| Thu, 05 May 2016 00:31:11 -0700 |
Gregory Szorc |
sslutil: document and slightly refactor sslkwargs
|
file |
diff |
annotate
|
| Sat, 30 Apr 2016 09:26:47 -0700 |
Gregory Szorc |
sslutil: restore old behavior not requiring a hostname argument (issue5210)
stable
|
file |
diff |
annotate
|
| Sun, 10 Apr 2016 11:02:58 -0700 |
Gregory Szorc |
sslutil: document and slightly refactor validation logic
|
file |
diff |
annotate
|
| Sun, 10 Apr 2016 11:00:41 -0700 |
Gregory Szorc |
sslutil: require a server hostname when wrapping sockets (API)
|
file |
diff |
annotate
|
| Sun, 10 Apr 2016 10:59:45 -0700 |
Gregory Szorc |
sslutil: move and document verify_mode assignment
|
file |
diff |
annotate
|
| Sun, 27 Mar 2016 13:13:19 -0700 |
Gregory Szorc |
sslutil: add docstring to wrapsocket()
|
file |
diff |
annotate
|
| Sun, 27 Mar 2016 11:39:39 -0700 |
Gregory Szorc |
sslutil: remove indentation in wrapsocket declaration
|
file |
diff |
annotate
|
| Sun, 27 Mar 2016 14:18:32 -0700 |
Gregory Szorc |
sslutil: always use SSLContext
|
file |
diff |
annotate
|
| Sun, 27 Mar 2016 14:08:52 -0700 |
Gregory Szorc |
sslutil: move _canloaddefaultcerts logic
|
file |
diff |
annotate
|
| Sun, 27 Mar 2016 13:50:34 -0700 |
Gregory Szorc |
sslutil: implement SSLContext class
|
file |
diff |
annotate
|
| Sun, 27 Mar 2016 10:47:24 -0700 |
Gregory Szorc |
sslutil: store OP_NO_SSL* constants in module scope
|
file |
diff |
annotate
|