upstream/mercurial-mirror Files · tests/test-gpg.t

sslutil: inform the user about how to fix an incomplete certificate chain...

sslutil: inform the user about how to fix an incomplete certificate chain This is a Windows only thing. Unfortunately, the socket is closed at this point (so the certificate is unavailable to check the chain). That means it's printed out when verification fails as a guess, on the assumption that 1) most of the time verification won't fail, and 2) sites using expired or certs that are too new will be rare. Maybe this is an argument for adding more functionality to debugssl, to test for problems and print certificate info. Or maybe it's an argument for bundling certificates with the Windows builds. That idea was set aside when the enhanced SSL code went in last summer, and it looks like there were issues with using certifi on Windows anyway[1]. This was tested by deleting the certificate out of certmgr.msc > "Third-Party Root Certification Authorities" > "Certificates", seeing `hg pull` fail (with the new message), trying this command, and then successfully performing the pull command. [1] https://www.mercurial-scm.org/pipermail/mercurial-devel/2016-October/089573.html

Yuya Nishihara - - Load All Authors

File last commit:

r29873:80ba176b default


                r33494:30f2715b

default

Download file

             test-gpg.t
        
                    56 lines
            
             | 1.1 KiB
            
                | text/troff
            
             |
                Tads3Lexer
            
             / tests / test-gpg.t
          
                    History
                
                 |
                  Annotation
                 | Raw
                 |Copy content
                 |Copy permalink

      #require gpg

      Test the GPG extension

        $ cat <<EOF >> $HGRCPATH

        > [extensions]

        > gpg=

        > 

        > [gpg]

        > cmd=gpg --no-permission-warning --no-secmem-warning --no-auto-check-trustdb

        > EOF

        $ GNUPGHOME="$TESTTMP/gpg"; export GNUPGHOME

        $ cp -R "$TESTDIR/gpg" "$GNUPGHOME"

      Start gpg-agent, which is required by GnuPG v2

      #if gpg21

        $ gpg-connect-agent -q --subst /serverpid '/echo ${get serverpid}' /bye \

        > >> $DAEMON_PIDS

      #endif

      and migrate secret keys

      #if gpg2

        $ gpg --no-permission-warning --no-secmem-warning --list-secret-keys \

        > > /dev/null 2>&1

      #endif

        $ hg init r

        $ cd r

        $ echo foo > foo

        $ hg ci -Amfoo

        adding foo

        $ hg sigs

        $ HGEDITOR=cat hg sign -e 0

        signing 0:e63c23eaa88a

        Added signature for changeset e63c23eaa88a

        HG: Enter commit message.  Lines beginning with 'HG:' are removed.

        HG: Leave message empty to abort commit.

        HG: --

        HG: user: test

        HG: branch 'default'

        HG: added .hgsigs

        $ hg sigs

        hgtest                             0:e63c23eaa88ae77967edcf4ea194d31167c478b0

        $ hg sigcheck 0

        e63c23eaa88a is signed by:

         hgtest

        $ cd ..

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

				#require gpg

				Test the GPG extension

				$ cat <<EOF >> $HGRCPATH
				> [extensions]
				> gpg=
				>
				> [gpg]
				> cmd=gpg --no-permission-warning --no-secmem-warning --no-auto-check-trustdb
				> EOF
				$ GNUPGHOME="$TESTTMP/gpg"; export GNUPGHOME
				$ cp -R "$TESTDIR/gpg" "$GNUPGHOME"

				Start gpg-agent, which is required by GnuPG v2

				#if gpg21
				$ gpg-connect-agent -q --subst /serverpid '/echo ${get serverpid}' /bye \
				> >> $DAEMON_PIDS
				#endif

				and migrate secret keys

				#if gpg2
				$ gpg --no-permission-warning --no-secmem-warning --list-secret-keys \
				> > /dev/null 2>&1
				#endif

				$ hg init r
				$ cd r
				$ echo foo > foo
				$ hg ci -Amfoo
				adding foo

				$ hg sigs

				$ HGEDITOR=cat hg sign -e 0
				signing 0:e63c23eaa88a
				Added signature for changeset e63c23eaa88a


				HG: Enter commit message. Lines beginning with 'HG:' are removed.
				HG: Leave message empty to abort commit.
				HG: --
				HG: user: test
				HG: branch 'default'
				HG: added .hgsigs

				$ hg sigs
				hgtest 0:e63c23eaa88ae77967edcf4ea194d31167c478b0

				$ hg sigcheck 0
				e63c23eaa88a is signed by:
				hgtest

				$ cd ..