upstream/mercurial-mirror Files · tests/printenv.py

sslutil: print a warning when using TLS 1.0 on legacy Python...

sslutil: print a warning when using TLS 1.0 on legacy Python Mercurial now requires TLS 1.1+ when TLS 1.1+ is supported by the client. Since we made the decision to require TLS 1.1+ when running with modern Python versions, it makes sense to do something for legacy Python versions that only support TLS 1.0. Feature parity would be to prevent TLS 1.0 connections out of the box and require a config option to enable them. However, this is extremely user hostile since Mercurial wouldn't talk to https:// by default in these installations! I can easily see how someone would do something foolish like use "--insecure" instead - and that would be worse than allowing TLS 1.0! This patch takes the compromise position of printing a warning when performing TLS 1.0 connections when running on old Python versions. While this warning is no more annoying than the CA certificate / fingerprint warnings in Mercurial 3.8, we provide a config option to disable the warning because to many people upgrading Python to make the warning go away is not an available recourse (unlike pinning fingerprints is for the CA warning). The warning appears as optional output in a lot of tests.

Robert Stanca - - Load All Authors

File last commit:

r28944:036787c1 default


                r29561:1a782fab

default

Download file

             printenv.py
        
                    52 lines
            
             | 1.3 KiB
            
                | text/x-python
            
             |
                PythonLexer
            
             / tests / printenv.py
          
                    History
                
                 |
                  Annotation
                 | Raw
                 |Copy content
                 |Copy permalink

      #!/usr/bin/env python

      #

      # simple script to be used in hooks

      #

      # put something like this in the repo .hg/hgrc:

      #

      #     [hooks]

      #     changegroup = python "$TESTDIR/printenv.py" <hookname> [exit] [output]

      #

      #   - <hookname> is a mandatory argument (e.g. "changegroup")

      #   - [exit] is the exit code of the hook (default: 0)

      #   - [output] is the name of the output file (default: use sys.stdout)

      #              the file will be opened in append mode.

      #

      from __future__ import absolute_import

      import os

      import sys

      try:

          import msvcrt

          msvcrt.setmode(sys.stdin.fileno(), os.O_BINARY)

          msvcrt.setmode(sys.stdout.fileno(), os.O_BINARY)

          msvcrt.setmode(sys.stderr.fileno(), os.O_BINARY)

      except ImportError:

          pass

      exitcode = 0

      out = sys.stdout

      name = sys.argv[1]

      if len(sys.argv) > 2:

          exitcode = int(sys.argv[2])

          if len(sys.argv) > 3:

              out = open(sys.argv[3], "ab")

      # variables with empty values may not exist on all platforms, filter

      # them now for portability sake.

      env = [(k, v) for k, v in os.environ.iteritems()

             if k.startswith("HG_") and v]

      env.sort()

      out.write("%s hook: " % name)

      if os.name == 'nt':

          filter = lambda x: x.replace('\\', '/')

      else:

          filter = lambda x: x

      vars = ["%s=%s" % (k, filter(v)) for k, v in env]

      out.write(" ".join(vars))

      out.write("\n")

      out.close()

      sys.exit(exitcode)

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

				#!/usr/bin/env python
				#
				# simple script to be used in hooks
				#
				# put something like this in the repo .hg/hgrc:
				#
				# [hooks]
				# changegroup = python "$TESTDIR/printenv.py" <hookname> [exit] [output]
				#
				# - <hookname> is a mandatory argument (e.g. "changegroup")
				# - [exit] is the exit code of the hook (default: 0)
				# - [output] is the name of the output file (default: use sys.stdout)
				# the file will be opened in append mode.
				#
				from __future__ import absolute_import
				import os
				import sys

				try:
				import msvcrt
				msvcrt.setmode(sys.stdin.fileno(), os.O_BINARY)
				msvcrt.setmode(sys.stdout.fileno(), os.O_BINARY)
				msvcrt.setmode(sys.stderr.fileno(), os.O_BINARY)
				except ImportError:
				pass

				exitcode = 0
				out = sys.stdout

				name = sys.argv[1]
				if len(sys.argv) > 2:
				exitcode = int(sys.argv[2])
				if len(sys.argv) > 3:
				out = open(sys.argv[3], "ab")

				# variables with empty values may not exist on all platforms, filter
				# them now for portability sake.
				env = [(k, v) for k, v in os.environ.iteritems()
				if k.startswith("HG_") and v]
				env.sort()

				out.write("%s hook: " % name)
				if os.name == 'nt':
				filter = lambda x: x.replace('\\', '/')
				else:
				filter = lambda x: x
				vars = ["%s=%s" % (k, filter(v)) for k, v in env]
				out.write(" ".join(vars))
				out.write("\n")
				out.close()

				sys.exit(exitcode)