upstream/mercurial-mirror Files · tests/test-schemes.t

sslutil: print a warning when using TLS 1.0 on legacy Python...

sslutil: print a warning when using TLS 1.0 on legacy Python Mercurial now requires TLS 1.1+ when TLS 1.1+ is supported by the client. Since we made the decision to require TLS 1.1+ when running with modern Python versions, it makes sense to do something for legacy Python versions that only support TLS 1.0. Feature parity would be to prevent TLS 1.0 connections out of the box and require a config option to enable them. However, this is extremely user hostile since Mercurial wouldn't talk to https:// by default in these installations! I can easily see how someone would do something foolish like use "--insecure" instead - and that would be worse than allowing TLS 1.0! This patch takes the compromise position of printing a warning when performing TLS 1.0 connections when running on old Python versions. While this warning is no more annoying than the CA certificate / fingerprint warnings in Mercurial 3.8, we provide a config option to disable the warning because to many people upgrading Python to make the warning go away is not an available recourse (unlike pinning fingerprints is for the CA warning). The warning appears as optional output in a lot of tests.

Jason R. Coombs - - Load All Authors

File last commit:

r27982:bf1d5c22 default


                r29561:1a782fab

default

Download file

             test-schemes.t
        
                    74 lines
            
             | 1.4 KiB
            
                | text/troff
            
             |
                Tads3Lexer
            
             / tests / test-schemes.t
          
                    History
                
                 |
                  Annotation
                 | Raw
                 |Copy content
                 |Copy permalink

      #require serve

        $ cat <<EOF >> $HGRCPATH

        > [extensions]

        > schemes=

        > 

        > [schemes]

        > l = http://localhost:$HGPORT/

        > parts = http://{1}:$HGPORT/

        > z = file:\$PWD/

        > EOF

        $ hg init test

        $ cd test

        $ echo a > a

        $ hg ci -Am initial

        adding a

      invalid scheme

        $ hg log -R z:z

        abort: no '://' in scheme url 'z:z'

        [255]

      http scheme

        $ hg serve -n test -p $HGPORT -d --pid-file=hg.pid -A access.log -E errors.log

        $ cat hg.pid >> $DAEMON_PIDS

        $ hg incoming l://

        comparing with l://

        searching for changes

        no changes found

        [1]

      check that {1} syntax works

        $ hg incoming --debug parts://localhost

        using http://localhost:$HGPORT/

        sending capabilities command

        comparing with parts://localhost/

        query 1; heads

        sending batch command

        searching for changes

        all remote heads known locally

        no changes found

        [1]

      check that paths are expanded

        $ PWD=`pwd` hg incoming z://

        comparing with z://

        searching for changes

        no changes found

        [1]

      check that debugexpandscheme outputs the canonical form

        $ hg debugexpandscheme bb://user/repo

        https://bitbucket.org/user/repo

      expanding an unknown scheme emits the input

        $ hg debugexpandscheme foobar://this/that

        foobar://this/that

      expanding a canonical URL emits the input

        $ hg debugexpandscheme https://bitbucket.org/user/repo

        https://bitbucket.org/user/repo

      errors

        $ cat errors.log

        $ cd ..

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

				#require serve

				$ cat <<EOF >> $HGRCPATH
				> [extensions]
				> schemes=
				>
				> [schemes]
				> l = http://localhost:$HGPORT/
				> parts = http://{1}:$HGPORT/
				> z = file:\$PWD/
				> EOF
				$ hg init test
				$ cd test
				$ echo a > a
				$ hg ci -Am initial
				adding a

				invalid scheme

				$ hg log -R z:z
				abort: no '://' in scheme url 'z:z'
				[255]

				http scheme

				$ hg serve -n test -p $HGPORT -d --pid-file=hg.pid -A access.log -E errors.log
				$ cat hg.pid >> $DAEMON_PIDS
				$ hg incoming l://
				comparing with l://
				searching for changes
				no changes found
				[1]

				check that {1} syntax works

				$ hg incoming --debug parts://localhost
				using http://localhost:$HGPORT/
				sending capabilities command
				comparing with parts://localhost/
				query 1; heads
				sending batch command
				searching for changes
				all remote heads known locally
				no changes found
				[1]

				check that paths are expanded

				$ PWD=`pwd` hg incoming z://
				comparing with z://
				searching for changes
				no changes found
				[1]

				check that debugexpandscheme outputs the canonical form

				$ hg debugexpandscheme bb://user/repo
				https://bitbucket.org/user/repo

				expanding an unknown scheme emits the input

				$ hg debugexpandscheme foobar://this/that
				foobar://this/that

				expanding a canonical URL emits the input

				$ hg debugexpandscheme https://bitbucket.org/user/repo
				https://bitbucket.org/user/repo

				errors

				$ cat errors.log

				$ cd ..