This is an archive of the discontinued Mercurial Phabricator instance.

Status	Author	Revision
Closed	jcristau	D12492 test: accept another error message on lack of TLS client certificate
Closed	jcristau	D12491 sslutil: treat TLSV1_ALERT_PROTOCOL_VERSION error the same as UNSUPPORTED_PROTOCOL
Closed	jcristau	D12490 test: override default cipher selection when connecting to TLS 1.0/1.1 servers
Closed	jcristau	D12489 sslutil: be less strict about which ciphers are allowed when using --insecure
Closed	jcristau	D12488 sslutil: avoid deprecation warnings from python 3.10's ssl module
Closed	jcristau	D12487 zeroconf: fix deprecation warning with python 3.10

Diff 33022

	$ hg serve -p $HGPORT -d --pid-file=../hg0.pid --certificate=$PRIV \			$ hg serve -p $HGPORT -d --pid-file=../hg0.pid --certificate=$PRIV \
	> --config devel.servercafile=$PRIV --config devel.serverrequirecert=true			> --config devel.servercafile=$PRIV --config devel.serverrequirecert=true
	$ cat ../hg0.pid >> $DAEMON_PIDS			$ cat ../hg0.pid >> $DAEMON_PIDS
	$ cd ..			$ cd ..

	without client certificate:			without client certificate:

	$ P="$CERTSDIR" hg id https://localhost:$HGPORT/			$ P="$CERTSDIR" hg id https://localhost:$HGPORT/
	abort: error: .(\$ECONNRESET\$\|certificate required\|handshake failure). (re)			abort: error: .(\$ECONNRESET\$\|certificate required\|handshake failure\|EOF occurred). (re)
	[100]			[100]

	with client certificate:			with client certificate:

	$ cat << EOT >> $HGRCPATH			$ cat << EOT >> $HGRCPATH
	> [auth]			> [auth]
	> l.prefix = localhost			> l.prefix = localhost
	> l.cert = $CERTSDIR/client-cert.pem			> l.cert = $CERTSDIR/client-cert.pem