# HG changeset patch
# User Gregory Szorc <gregory.szorc@gmail.com>
# Date 1467341652 25200
# Node ID 1c26b9ce66f8c725c6e641e2a9d02103bbb1d6a4
# Parent  cdcb5747dc88dcd1a250be4c87e9eb50e3295235
sslutil: expand _defaultcacerts docstring to note calling assumptions

We should document this so future message additions don't seem out
of place.

diff -r cdcb5747dc88 -r 1c26b9ce66f8 mercurial/sslutil.py
--- a/mercurial/sslutil.py	Mon Jul 04 10:00:56 2016 -0700
+++ b/mercurial/sslutil.py	Thu Jun 30 19:54:12 2016 -0700
@@ -431,7 +431,12 @@
             exe.startswith('/system/library/frameworks/python.framework/'))
 
 def _defaultcacerts(ui):
-    """return path to default CA certificates or None."""
+    """return path to default CA certificates or None.
+
+    It is assumed this function is called when the returned certificates
+    file will actually be used to validate connections. Therefore this
+    function may print warnings or debug messages assuming this usage.
+    """
     # The "certifi" Python package provides certificates. If it is installed,
     # assume the user intends it to be used and use it.
     try: