configitems: register the 'web.push_ssl' config

mercurial/configitems.py

@@ -736,6 +736,9 b" coreconfigitem('web', 'port',"
 coreconfigitem('web', 'prefix',
     default='',
 )
+coreconfigitem('web', 'push_ssl',
+    default=True,
+)
 coreconfigitem('web', 'refreshinterval',
     default=20,
 )

mercurial/hgweb/common.py

@@ -69,7 +69,7 b' def checkauthz(hgweb, req, op):'
     # require ssl by default for pushing, auth info cannot be sniffed
     # and replayed
     scheme = req.env.get('wsgi.url_scheme')
-    if hgweb.configbool('web', 'push_ssl', True) and scheme != 'https':
+    if hgweb.configbool('web', 'push_ssl') and scheme != 'https':
         raise ErrorResponse(HTTP_FORBIDDEN, 'ssl required')
 
     deny = hgweb.configlist('web', 'deny_push')