diff mercurial/sslutil.py @ 52312:a820a7a1fce0

setup: require TLS 1.2 support from the Python interpreter (BC) Before it was optional, and either 1.1 or 1.2 was sufficient. Now that the default minimum is 1.2, it needs to be present to work out of the box. The code here is more convoluted than the corresponding checks in `sslutil.py`, but I'm leaving it alone because it can all be simplified when py38 is dropped.
author Matt Harbison <matt_harbison@yahoo.com>
date Thu, 21 Nov 2024 11:46:10 -0500
parents 085cc409847d
children
line wrap: on
line diff
--- a/mercurial/sslutil.py	Thu Nov 21 01:07:47 2024 -0500
+++ b/mercurial/sslutil.py	Thu Nov 21 11:46:10 2024 -0500
@@ -103,8 +103,8 @@
     # BEAST and POODLE). We allow users to downgrade to TLS 1.0+ via config
     # options in case a legacy server is encountered.
 
-    # setup.py checks that TLS 1.1 or TLS 1.2 is present, so the following
-    # assert should not fail.
+    # setup.py checks that TLS 1.2 is present, so the following assert should
+    # not fail.
     assert supportedprotocols - {b'tls1.0', b'tls1.1'}
     defaultminimumprotocol = b'tls1.2'