# HG changeset patch # User Yuya Nishihara # Date 1465097348 -32400 # Node ID e3dc96834126ff3e68920339781f2fe27b8b7c2f # Parent a6739872674752a27e664f684afe2f418fd157f6 url: drop support for proxying HTTP (not HTTPS) over CONNECT tunneling It's been broken since cca59ef27e60, which made ui argument mandatory. I've tried several combinations of HTTP/HTTPS proxying on old/new Python versions, but I couldn't figure out how to reach this code path. Also, wrapping HTTP connection by SSLSocket seems wrong. My understanding is that self.realhostport is set by _generic_start_transaction() if HTTPS connection is tunneled. This patch removes proxy tunneling from httpconnection.connect() assuming that it was dead code from the beginning. Note that HTTPS over tunneling should be handled by httpsconnection class. diff -r a67398726747 -r e3dc96834126 mercurial/url.py --- a/mercurial/url.py Sat May 21 18:16:39 2016 +0900 +++ b/mercurial/url.py Sun Jun 05 12:29:08 2016 +0900 @@ -185,17 +185,6 @@ # must be able to send big bundle as stream. send = _gen_sendfile(keepalive.HTTPConnection.send) - def connect(self): - if has_https and self.realhostport: # use CONNECT proxy - self.sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) - self.sock.connect((self.host, self.port)) - if _generic_proxytunnel(self): - # we do not support client X.509 certificates - self.sock = sslutil.wrapsocket(self.sock, None, None, None, - serverhostname=self.host) - else: - keepalive.HTTPConnection.connect(self) - def getresponse(self): proxyres = getattr(self, 'proxyres', None) if proxyres: