Show More
@@ -282,12 +282,8 b' Test server cert which no longer is vali' | |||
|
282 | 282 | |
|
283 | 283 | Fingerprints |
|
284 | 284 | |
|
285 | $ echo "[hostfingerprints]" >> copy-pull/.hg/hgrc | |
|
286 | $ echo "localhost = 91:4f:1a:ff:87:24:9c:09:b6:85:9b:88:b1:90:6d:30:75:64:91:ca" >> copy-pull/.hg/hgrc | |
|
287 | $ echo "127.0.0.1 = 914f1aff87249c09b6859b88b1906d30756491ca" >> copy-pull/.hg/hgrc | |
|
288 | ||
|
289 | 285 | - works without cacerts |
|
290 | $ hg -R copy-pull id https://localhost:$HGPORT/ --insecure | |
|
286 | $ hg -R copy-pull id https://localhost:$HGPORT/ --insecure --config hostfingerprints.localhost=91:4f:1a:ff:87:24:9c:09:b6:85:9b:88:b1:90:6d:30:75:64:91:ca | |
|
291 | 287 | 5fed3813f7f5 |
|
292 | 288 | |
|
293 | 289 | - multiple fingerprints specified and first matches |
@@ -306,14 +302,14 b' Fingerprints' | |||
|
306 | 302 | [255] |
|
307 | 303 | |
|
308 | 304 | - fails when cert doesn't match hostname (port is ignored) |
|
309 | $ hg -R copy-pull id https://localhost:$HGPORT1/ | |
|
305 | $ hg -R copy-pull id https://localhost:$HGPORT1/ --config hostfingerprints.localhost=914f1aff87249c09b6859b88b1906d30756491ca | |
|
310 | 306 | abort: certificate for localhost has unexpected fingerprint 28:ff:71:bf:65:31:14:23:ad:62:92:b4:0e:31:99:18:fc:83:e3:9b |
|
311 | 307 | (check hostfingerprint configuration) |
|
312 | 308 | [255] |
|
313 | 309 | |
|
314 | 310 | |
|
315 | 311 | - ignores that certificate doesn't match hostname |
|
316 | $ hg -R copy-pull id https://127.0.0.1:$HGPORT/ | |
|
312 | $ hg -R copy-pull id https://127.0.0.1:$HGPORT/ --config hostfingerprints.127.0.0.1=914f1aff87249c09b6859b88b1906d30756491ca | |
|
317 | 313 | 5fed3813f7f5 |
|
318 | 314 | |
|
319 | 315 | HGPORT1 is reused below for tinyproxy tests. Kill that server. |
@@ -344,7 +340,7 b' Test https with cacert and fingerprint t' | |||
|
344 | 340 | pulling from https://localhost:$HGPORT/ |
|
345 | 341 | searching for changes |
|
346 | 342 | no changes found |
|
347 | $ http_proxy=http://localhost:$HGPORT1/ hg -R copy-pull pull https://127.0.0.1:$HGPORT/ | |
|
343 | $ http_proxy=http://localhost:$HGPORT1/ hg -R copy-pull pull https://127.0.0.1:$HGPORT/ --config hostfingerprints.127.0.0.1=914f1aff87249c09b6859b88b1906d30756491ca | |
|
348 | 344 | pulling from https://127.0.0.1:$HGPORT/ |
|
349 | 345 | searching for changes |
|
350 | 346 | no changes found |
General Comments 0
You need to be logged in to leave comments.
Login now