| pulkit |
| hg-reviewers |
It will likely be a str on Python 3.
| Lint Skipped |
| Unit Tests Skipped |
| if supportedprotocols != {'tls1.0'}: | if supportedprotocols != {'tls1.0'}: | ||||
| ui.warn(_( | ui.warn(_( | ||||
| '(could not communicate with %s using security ' | '(could not communicate with %s using security ' | ||||
| 'protocols %s; if you are using a modern Mercurial ' | 'protocols %s; if you are using a modern Mercurial ' | ||||
| 'version, consider contacting the operator of this ' | 'version, consider contacting the operator of this ' | ||||
| 'server; see ' | 'server; see ' | ||||
| 'https://mercurial-scm.org/wiki/SecureConnections ' | 'https://mercurial-scm.org/wiki/SecureConnections ' | ||||
| 'for more info)\n') % ( | 'for more info)\n') % ( | ||||
| serverhostname, | pycompat.bytesurl(serverhostname), | ||||
| ', '.join(sorted(supportedprotocols)))) | ', '.join(sorted(supportedprotocols)))) | ||||
| else: | else: | ||||
| ui.warn(_( | ui.warn(_( | ||||
| '(could not communicate with %s using TLS 1.0; the ' | '(could not communicate with %s using TLS 1.0; the ' | ||||
| 'likely cause of this is the server no longer ' | 'likely cause of this is the server no longer ' | ||||
| 'supports TLS 1.0 because it has known security ' | 'supports TLS 1.0 because it has known security ' | ||||
| 'vulnerabilities; see ' | 'vulnerabilities; see ' | ||||
| 'https://mercurial-scm.org/wiki/SecureConnections ' | 'https://mercurial-scm.org/wiki/SecureConnections ' | ||||
| 'for more info)\n') % serverhostname) | 'for more info)\n') % | ||||
| pycompat.bytesurl(serverhostname)) | |||||
| else: | else: | ||||
| # We attempted TLS 1.1+. We can only get here if the client | # We attempted TLS 1.1+. We can only get here if the client | ||||
| # supports the configured protocol. So the likely reason is | # supports the configured protocol. So the likely reason is | ||||
| # the client wants better security than the server can | # the client wants better security than the server can | ||||
| # offer. | # offer. | ||||
| ui.warn(_( | ui.warn(_( | ||||
| '(could not negotiate a common security protocol (%s+) ' | '(could not negotiate a common security protocol (%s+) ' | ||||
| 'with %s; the likely cause is Mercurial is configured ' | 'with %s; the likely cause is Mercurial is configured ' | ||||
| 'to be more secure than the server can support)\n') % ( | 'to be more secure than the server can support)\n') % ( | ||||
| settings['protocolui'], serverhostname)) | settings['protocolui'], | ||||
| pycompat.bytesurl(serverhostname))) | |||||
| ui.warn(_('(consider contacting the operator of this ' | ui.warn(_('(consider contacting the operator of this ' | ||||
| 'server and ask them to support modern TLS ' | 'server and ask them to support modern TLS ' | ||||
| 'protocol versions; or, set ' | 'protocol versions; or, set ' | ||||
| 'hostsecurity.%s:minimumprotocol=tls1.0 to allow ' | 'hostsecurity.%s:minimumprotocol=tls1.0 to allow ' | ||||
| 'use of legacy, less secure protocols when ' | 'use of legacy, less secure protocols when ' | ||||
| 'communicating with this server)\n') % | 'communicating with this server)\n') % | ||||
| serverhostname) | pycompat.bytesurl(serverhostname)) | ||||
| ui.warn(_( | ui.warn(_( | ||||
| '(see https://mercurial-scm.org/wiki/SecureConnections ' | '(see https://mercurial-scm.org/wiki/SecureConnections ' | ||||
| 'for more info)\n')) | 'for more info)\n')) | ||||
| elif (e.reason == r'CERTIFICATE_VERIFY_FAILED' and | elif (e.reason == r'CERTIFICATE_VERIFY_FAILED' and | ||||
| pycompat.iswindows): | pycompat.iswindows): | ||||
| ui.warn(_('(the full certificate chain may not be available ' | ui.warn(_('(the full certificate chain may not be available ' | ||||