# HG changeset patch
# User Mads Kiilerich <mads@kiilerich.com>
# Date 2011-06-17 23:08:54
# Node ID 8f12dac18d13d3cdd105508847fea2aecf88a09e
# Parent  27b080aa880aaf8bd99728928358c9d37e231a3e

sslutil: make messages for Python without certificate handling more helpful

We now explain why there is no certificate to verify and do not give hints
about cacerts when they can't be used anyway.

diff --git a/mercurial/sslutil.py b/mercurial/sslutil.py
--- a/mercurial/sslutil.py
+++ b/mercurial/sslutil.py
@@ -122,8 +122,7 @@ class validator(object):
                                  (host, nicefingerprint))
             else: # python 2.5 ?
                 if hostfingerprint:
-                    raise util.Abort(_('no certificate for %s with '
-                                       'configured hostfingerprint') % host)
-                self.ui.warn(_('warning: %s certificate not verified '
-                               '(check web.cacerts config setting)\n') %
-                             host)
+                    raise util.Abort(_("host fingerprint for %s can't be "
+                                       "verified (Python too old)") % host)
+                self.ui.warn(_("warning: certificate for %s can't be "
+                               "verified (Python too old)\n") % host)