upstream/mercurial-mirror Files · tests/test-revlog.t

sslutil: try to find CA certficates in well-known locations...

sslutil: try to find CA certficates in well-known locations Many Linux distros and other Nixen have CA certificates in well-defined locations. Rather than potentially fail to load any CA certificates at all (which will always result in a certificate verification failure), we scan for paths to known CA certificate files and load one if seen. Because a proper Mercurial install will have the path to the CA certificate file defined at install time, we print a warning that the install isn't proper and provide a URL with instructions to correct things. We only perform path-based fallback on Pythons that don't know how to call into OpenSSL to load the default verify locations. This is because we trust that Python/OpenSSL is properly configured and knows better than Mercurial. So this new code effectively only runs on Python <2.7.9 (technically Pythons without the modern ssl module).

Maciej Fijalkowski - - Load All Authors

File last commit:

r28783:d9179856 default


                r29500:4b16a5bd

default

Download file

             test-revlog.t
        
                    15 lines
            
             | 653 B
            
                | text/troff
            
             |
                Tads3Lexer
            
             / tests / test-revlog.t
          
                    History
                
                 |
                  Annotation
                 | Raw
                 |Copy content
                 |Copy permalink

      Test for CVE-2016-3630

        $ hg init

        >>> open("a.i", "w").write(

        ... """eJxjYGZgZIAAYQYGxhgom+k/FMx8YKx9ZUaKSOyqo4cnuKb8mbqHV5cBCVTMWb1Cwqkhe4Gsg9AD

        ... Joa3dYtcYYYBAQ8Qr4OqZAYRICPTSr5WKd/42rV36d+8/VmrNpv7NP1jQAXrQE4BqQUARngwVA=="""

        ... .decode("base64").decode("zlib"))

        $ hg debugindex a.i

           rev    offset  length  delta linkrev nodeid       p1           p2

             0         0      19     -1       2 99e0332bd498 000000000000 000000000000

             1        19      12      0       3 6674f57a23d8 99e0332bd498 000000000000

        $ hg debugdata a.i 1 2>&1 | egrep 'Error:.*decoded'

        (mercurial.mpatch.)?mpatchError: patch cannot be decoded (re)

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

				Test for CVE-2016-3630

				$ hg init

				>>> open("a.i", "w").write(
				... """eJxjYGZgZIAAYQYGxhgom+k/FMx8YKx9ZUaKSOyqo4cnuKb8mbqHV5cBCVTMWb1Cwqkhe4Gsg9AD
				... Joa3dYtcYYYBAQ8Qr4OqZAYRICPTSr5WKd/42rV36d+8/VmrNpv7NP1jQAXrQE4BqQUARngwVA=="""
				... .decode("base64").decode("zlib"))

				$ hg debugindex a.i
				rev offset length delta linkrev nodeid p1 p2
				0 0 19 -1 2 99e0332bd498 000000000000 000000000000
				1 19 12 0 3 6674f57a23d8 99e0332bd498 000000000000
				$ hg debugdata a.i 1 2>&1 \| egrep 'Error:.*decoded'
				(mercurial.mpatch.)?mpatchError: patch cannot be decoded (re)