Mercurial > public > mercurial-scm > hg
comparison mercurial/sslutil.py @ 29487:cdcb5747dc88
sslutil: document the Apple OpenSSL cert trick
This is sort of documented in _plainapplypython()'s docstring. But
it helps to be explicit in security code.
| author | Gregory Szorc <gregory.szorc@gmail.com> |
|---|---|
| date | Mon, 04 Jul 2016 10:00:56 -0700 |
| parents | a62c00f6dd04 |
| children | 1c26b9ce66f8 |
comparison
equal
deleted
inserted
replaced
| 29486:a62c00f6dd04 | 29487:cdcb5747dc88 |
|---|---|
| 440 ui.debug('using ca certificates from certifi\n') | 440 ui.debug('using ca certificates from certifi\n') |
| 441 return certs | 441 return certs |
| 442 except ImportError: | 442 except ImportError: |
| 443 pass | 443 pass |
| 444 | 444 |
| 445 # Apple's OpenSSL has patches that allow a specially constructed certificate | |
| 446 # to load the system CA store. If we're running on Apple Python, use this | |
| 447 # trick. | |
| 445 if _plainapplepython(): | 448 if _plainapplepython(): |
| 446 dummycert = os.path.join(os.path.dirname(__file__), 'dummycert.pem') | 449 dummycert = os.path.join(os.path.dirname(__file__), 'dummycert.pem') |
| 447 if os.path.exists(dummycert): | 450 if os.path.exists(dummycert): |
| 448 return dummycert | 451 return dummycert |
| 449 | 452 |