From owner-freebsd-python@FreeBSD.ORG Thu Aug 30 19:13:16 2012 Return-Path: Delivered-To: python@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7E969106564A for ; Thu, 30 Aug 2012 19:13:16 +0000 (UTC) (envelope-from cvs-src@yandex.ru) Received: from forward9.mail.yandex.net (forward9.mail.yandex.net [IPv6:2a02:6b8:0:202::4]) by mx1.freebsd.org (Postfix) with ESMTP id E56088FC15 for ; Thu, 30 Aug 2012 19:13:15 +0000 (UTC) Received: from smtp9.mail.yandex.net (smtp9.mail.yandex.net [77.88.61.35]) by forward9.mail.yandex.net (Yandex) with ESMTP id 7434BCE0F48; Thu, 30 Aug 2012 23:13:14 +0400 (MSK) Received: from smtp9.mail.yandex.net (localhost [127.0.0.1]) by smtp9.mail.yandex.net (Yandex) with ESMTP id 5068D152072F; Thu, 30 Aug 2012 23:13:14 +0400 (MSK) Received: from unknown (unknown [178.76.224.133]) by smtp9.mail.yandex.net (nwsmtp/Yandex) with ESMTP id DDwK8L8h-DDw8XBp9; Thu, 30 Aug 2012 23:13:14 +0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1346353994; bh=aG1rhbKIej3aXR3KrtjhWxuI9igxILlLCxULH/PCjbc=; h=Message-ID:Date:From:User-Agent:MIME-Version:To:CC:Subject: References:In-Reply-To:Content-Type:Content-Transfer-Encoding; b=DhMPcDygY/SfK7fWIRMBW2C3IX84896MzOHlV1HMefS1UjOcdCfyRPEeDp8A8FXWa ZQE1PfVhitHjV3FPdNXyjYmP7OtgaQzZKco98QEZoWgO6Cf8KgqdW4vVYF3m6IIBUW 8lO7293XuoQachkoxzpdZ29VJA73eN3tcXpIubbU= Message-ID: <503FBB43.2050507@yandex.ru> Date: Thu, 30 Aug 2012 23:13:07 +0400 From: Ruslan Mahmatkhanov User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:14.0) Gecko/20120823 Thunderbird/14.0 MIME-Version: 1.0 To: Alexander Kapshuk References: <50312651.7020202@gmail.com> <503E66B5.2020809@yandex.ru> <503E7CF0.3040802@gmail.com> In-Reply-To: <503E7CF0.3040802@gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: python@FreeBSD.org Subject: Re: Mercurial CA Certificates X-BeenThere: freebsd-python@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: FreeBSD-specific Python issues List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Aug 2012 19:13:16 -0000 Alexander Kapshuk wrote on 30.08.2012 00:34: > On 08/29/12 22:00, Ruslan Mahmatkhanov wrote: >> Hi, >> >> Alexander Kapshuk wrote on 19.08.2012 21:45: >>> How do I add an CA Certificate for Mercurial on FreeBSD please? >>> >>> :; uname -a >>> FreeBSD box2 9.0-RELEASE-p4 FreeBSD 9.0-RELEASE-p4 #0: Fri Aug 17 >>> 21:53:39 EEST 2012 root@box2:/usr/obj/usr/src/sys/GENERIC i386 >>> >>> :; pkg_info -xc mercurial | sed 1q >>> Information for mercurial-2.3: >>> >>> Thanks. >> >> As far I understand, FreeBSD doesn't come prepackaged with root CA >> certificates like other systems do (it's not 146%, but seems so). So, >> I'd follow recommendation from [1] in part "2.7. Other platforms". >> >> - download CA list from [2] >> - put this lines into your ~/.hgrc: >> >> [web] >> cacerts = /place/where/you/put/cacert.pem >> >> Hope this helps. >> >> [1] http://mercurial.selenic.com/wiki/CACertificates >> [2] http://curl.haxx.se/docs/caextract.html >> > OK. Thanks. I'll give that a try. Just realized that there is security/ca_root_nss that installs the certs into /usr/local/share/certs and the port itself asks if you want to create symlink to it in /etc/ssl/cert.pem. You may add any of them into your ~/.hgrc. Please let me know if it works for you, and if it is, it should be added into mercurial's wiki, and maybe to our mercurial port as pkg-message or so. -- Regards, Ruslan Tinderboxing kills... the drives.