On 14 October 2011 20:11, Surya Nyayapati <[email protected]> wrote:

> I created a test project in codeplex ...and tried to clone it over https
> and it works. (for latest tortoisehg)
> I retried to clone from my self signed server now and it failed.
>

I guess the issue is with your self signed certificate at the client end.


>
> In my Win 7, I uninstalled my old client
> (tortoisehg-2.1.3-hg-1.9.2-x64.msi) and deleted my
> %USERPROFILE%\Mercurial.ini
>
> I downloaded and installed tortoisehg-1.1.10-hg-1.8.1-x64.msi.
> Tried cloning and it gave me SSL Validation failed error.
> So i added my cert entries to TortoiseHg\hgrc.d\cacert.pem and retried my
> cloning and....It works!!
> it popsup for username and password and cloned my project.
>
> I think Hg 1.9.2 for windows does not like self signed certificates?
>
> I actually retried above steps on a different machine
> for tortoisehg-2.1.3-hg-1.9.2-x64.msi (thinking i may have missed something)
> but got the same error.
>
> Just to be sure, you did follow the recommendation at
http://mercurial.selenic.com/wiki/CACertificates and added a [web] section
to your client global settings?

And, if you clone using the --insecure flag, it still fails?

I found a section on the Mercurial CACertificates page saying:
*Self-signed certificates generated by IIS7 might not work with
OpenSSL/Python as used by Mercurial. They do apparently have different
opinions on what a valid CA certificate should contain. Instead, use openssl
to create your server certificate and your CA certificate.*

Have you tried creating your server certificate using openssl?

So is this a bug with Hg 1.9.2? what do you recommend? is it ok for us to
> use start using tortoisehg-1.1.10-hg-1.8.1-x64.msi (as its old version)
>

I would always recommend using the latest version, but since you have issues
with it just use the version which is good for you. I also recommend you
file a bug on Mercurial 1.9.2 - after you have discussed it on the Mercurial
mail list or on Mercurial IRC.

Regards,
Peer
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2d-oct
_______________________________________________
Tortoisehg-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tortoisehg-discuss

Reply via email to