--- a/mercurial/configitems.py Wed Oct 11 03:18:04 2017 +0200
+++ b/mercurial/configitems.py Wed Oct 11 03:29:09 2017 +0200
@@ -736,6 +736,9 @@
coreconfigitem('web', 'prefix',
default='',
)
+coreconfigitem('web', 'push_ssl',
+ default=True,
+)
coreconfigitem('web', 'refreshinterval',
default=20,
)
--- a/mercurial/hgweb/common.py Wed Oct 11 03:18:04 2017 +0200
+++ b/mercurial/hgweb/common.py Wed Oct 11 03:29:09 2017 +0200
@@ -69,7 +69,7 @@
# require ssl by default for pushing, auth info cannot be sniffed
# and replayed
scheme = req.env.get('wsgi.url_scheme')
- if hgweb.configbool('web', 'push_ssl', True) and scheme != 'https':
+ if hgweb.configbool('web', 'push_ssl') and scheme != 'https':
raise ErrorResponse(HTTP_FORBIDDEN, 'ssl required')
deny = hgweb.configlist('web', 'deny_push')