Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 30 Aug 2012 23:13:07 +0400
From:      Ruslan Mahmatkhanov <cvs-src@yandex.ru>
To:        Alexander Kapshuk <alexander.kapshuk@gmail.com>
Cc:        python@FreeBSD.org
Subject:   Re: Mercurial CA Certificates
Message-ID:  <503FBB43.2050507@yandex.ru>
In-Reply-To: <503E7CF0.3040802@gmail.com>
References:  <50312651.7020202@gmail.com> <503E66B5.2020809@yandex.ru> <503E7CF0.3040802@gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Alexander Kapshuk wrote on 30.08.2012 00:34:
> On 08/29/12 22:00, Ruslan Mahmatkhanov wrote:
>> Hi,
>>
>> Alexander Kapshuk wrote on 19.08.2012 21:45:
>>> How do I add an CA Certificate for Mercurial on FreeBSD please?
>>>
>>> :; uname -a
>>> FreeBSD box2 9.0-RELEASE-p4 FreeBSD 9.0-RELEASE-p4 #0: Fri Aug 17
>>> 21:53:39 EEST 2012     root@box2:/usr/obj/usr/src/sys/GENERIC i386
>>>
>>> :; pkg_info -xc mercurial | sed 1q
>>> Information for mercurial-2.3:
>>>
>>> Thanks.
>>
>> As far I understand, FreeBSD doesn't come prepackaged with root CA
>> certificates like other systems do (it's not 146%, but seems so). So,
>> I'd follow recommendation from [1] in part "2.7. Other platforms".
>>
>> - download CA list from [2]
>> - put this lines into your ~/.hgrc:
>>
>> [web]
>> cacerts = /place/where/you/put/cacert.pem
>>
>> Hope this helps.
>>
>> [1] http://mercurial.selenic.com/wiki/CACertificates
>> [2] http://curl.haxx.se/docs/caextract.html
>>
> OK. Thanks. I'll give that a try.

Just realized that there is security/ca_root_nss that installs the certs 
into /usr/local/share/certs and the port itself asks if you want to 
create symlink to it in /etc/ssl/cert.pem. You may add any of them into 
your ~/.hgrc. Please let me know if it works for you, and if it is, it 
should be added into mercurial's wiki, and maybe to our mercurial port 
as pkg-message or so.

-- 
Regards,
Ruslan

Tinderboxing kills... the drives.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?503FBB43.2050507>