upstream/mercurial-mirror Files · tests/test-gpg.t

sslutil: print a warning when using TLS 1.0 on legacy Python...

sslutil: print a warning when using TLS 1.0 on legacy Python Mercurial now requires TLS 1.1+ when TLS 1.1+ is supported by the client. Since we made the decision to require TLS 1.1+ when running with modern Python versions, it makes sense to do something for legacy Python versions that only support TLS 1.0. Feature parity would be to prevent TLS 1.0 connections out of the box and require a config option to enable them. However, this is extremely user hostile since Mercurial wouldn't talk to https:// by default in these installations! I can easily see how someone would do something foolish like use "--insecure" instead - and that would be worse than allowing TLS 1.0! This patch takes the compromise position of printing a warning when performing TLS 1.0 connections when running on old Python versions. While this warning is no more annoying than the CA certificate / fingerprint warnings in Mercurial 3.8, we provide a config option to disable the warning because to many people upgrading Python to make the warning go away is not an available recourse (unlike pinning fingerprints is for the CA warning). The warning appears as optional output in a lot of tests.

Matt Mackall - - Load All Authors

File last commit:

r25472:4d2b9b30 default


                r29561:1a782fab

default

Download file

             test-gpg.t
        
                    47 lines
            
             | 1.0 KiB
            
                | text/troff
            
             |
                Tads3Lexer
            
             / tests / test-gpg.t
          
                    History
                
                 |
                  Source
                 | Raw
                 |Copy content
                 |Copy permalink

        Matt Mackall
    
tests: replace exit 80 with #require

              r22046
            
      #require gpg

        Matt Mackall
    
tests: unify test-gpg

              r12428
            
      Test the GPG extension

        $ cat <<EOF >> $HGRCPATH

        > [extensions]

        > gpg=

        > 

        > [gpg]

        Thomas Arendsen Hein
    
tests: make tests work if directory contains special characters...

              r16350
            
        > cmd=gpg --no-permission-warning --no-secmem-warning --no-auto-check-trustdb --homedir "$TESTDIR/gpg"

        Matt Mackall
    
tests: unify test-gpg

              r12428
            
        > EOF

        $ hg init r

        $ cd r

        $ echo foo > foo

        $ hg ci -Amfoo

        adding foo

        $ hg sigs

        FUJIWARA Katsunori
    
gpg: accept '--edit' like other commands creating new changeset...

              r21711
            
        $ HGEDITOR=cat hg sign -e 0

        Martin Geisler
    
gpg: lowercase messages

              r16927
            
        signing 0:e63c23eaa88a

        FUJIWARA Katsunori
    
gpg: accept '--edit' like other commands creating new changeset...

              r21711
            
        Added signature for changeset e63c23eaa88a

        HG: Enter commit message.  Lines beginning with 'HG:' are removed.

        HG: Leave message empty to abort commit.

        HG: --

        HG: user: test

        HG: branch 'default'

        HG: added .hgsigs

        Matt Mackall
    
tests: unify test-gpg

              r12428
            
        $ hg sigs

        hgtest                             0:e63c23eaa88ae77967edcf4ea194d31167c478b0

        $ hg sigcheck 0

        e63c23eaa88a is signed by:

         hgtest

        Greg Ward
    
test-gpg: make sure gpg does not modify the trustdb.gpg file...

              r16289
            
      verify that this test has not modified the trustdb.gpg file back in

      the main hg working dir

        Matt Mackall
    
tests: drop explicit $TESTDIR from executables...

              r25472
            
        $ md5sum.py "$TESTDIR/gpg/trustdb.gpg"

        Thomas Arendsen Hein
    
test-gpg: replace 825565136235 by md5sum check...

              r16349
            
        f6b9c78c65fa9536e7512bb2ceb338ae  */gpg/trustdb.gpg (glob)

        Mads Kiilerich
    
tests: add missing trailing 'cd ..'...

              r16913
            
        Mads Kiilerich
    
tests: stop tracking tests/gpg/random_seed...

              r20305
            
      don't leak any state to next test run

        $ rm -f "$TESTDIR/gpg/random_seed"

        Mads Kiilerich
    
tests: add missing trailing 'cd ..'...

              r16913
            
        $ cd ..

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

Matt Mackall tests: replace exit 80 with #require	r22046	#require gpg

Matt Mackall tests: unify test-gpg	r12428	Test the GPG extension

		$ cat <<EOF >> $HGRCPATH
		> [extensions]
		> gpg=
		>
		> [gpg]
Thomas Arendsen Hein tests: make tests work if directory contains special characters...	r16350	> cmd=gpg --no-permission-warning --no-secmem-warning --no-auto-check-trustdb --homedir "$TESTDIR/gpg"
Matt Mackall tests: unify test-gpg	r12428	> EOF
		$ hg init r
		$ cd r
		$ echo foo > foo
		$ hg ci -Amfoo
		adding foo

		$ hg sigs

FUJIWARA Katsunori gpg: accept '--edit' like other commands creating new changeset...	r21711	$ HGEDITOR=cat hg sign -e 0
Martin Geisler gpg: lowercase messages	r16927	signing 0:e63c23eaa88a
FUJIWARA Katsunori gpg: accept '--edit' like other commands creating new changeset...	r21711	Added signature for changeset e63c23eaa88a


		HG: Enter commit message. Lines beginning with 'HG:' are removed.
		HG: Leave message empty to abort commit.
		HG: --
		HG: user: test
		HG: branch 'default'
		HG: added .hgsigs
Matt Mackall tests: unify test-gpg	r12428
		$ hg sigs
		hgtest 0:e63c23eaa88ae77967edcf4ea194d31167c478b0

		$ hg sigcheck 0
		e63c23eaa88a is signed by:
		hgtest
Greg Ward test-gpg: make sure gpg does not modify the trustdb.gpg file...	r16289
		verify that this test has not modified the trustdb.gpg file back in
		the main hg working dir
Matt Mackall tests: drop explicit $TESTDIR from executables...	r25472	$ md5sum.py "$TESTDIR/gpg/trustdb.gpg"
Thomas Arendsen Hein test-gpg: replace 825565136235 by md5sum check...	r16349	f6b9c78c65fa9536e7512bb2ceb338ae */gpg/trustdb.gpg (glob)
Mads Kiilerich tests: add missing trailing 'cd ..'...	r16913
Mads Kiilerich tests: stop tracking tests/gpg/random_seed...	r20305	don't leak any state to next test run
		$ rm -f "$TESTDIR/gpg/random_seed"

Mads Kiilerich tests: add missing trailing 'cd ..'...	r16913	$ cd ..