https://bz.mercurial-scm.org/show_bug.cgi?id=5466
Bug ID: 5466
Summary: Mercurial 4.0.1 on Windows 7. Doesn't accept sha256
certificate finger print.
Product: Mercurial
Version: earlier
Hardware: PC
OS: Windows
Status: UNCONFIRMED
Severity: feature
Priority: wish
Component: Mercurial
Assignee: bugzi...@mercurial-scm.org
Reporter: russellp...@foxhat.net
CC: mercurial-de...@selenic.com
I have just installed TortoiseHg 4.0.1 x86 for Windows on a Windows 7 dev box.
I entered the sha256 fingerprint for Bitbucket.org into my mercurial.ini file:
----snip--------snip--------snip----
# Generated by TortoiseHg settings dialog
[hostfingerprints]
bitbucket.org =
4E:65:3E:76:0F:81:59:85:5B:50:06:0C:C2:4D:3C:56:53:8B:83:3E:9B:FA:55:26:98:9A:CA:E2:25:03:92:47
----snip--------snip--------snip----
When I try to clone a repository on Bitbucket, this is the result:
----snip--------snip--------snip----
D:\repos>hg clone https://unixw...@bitbucket.org/Unixwolf/pdfview
abort: certificate for bitbucket.org has unexpected fingerprint
3f:d3:c5:17:23:3
c:cd:f5:2d:17:76:06:93:7e:ee:97:42:21:14:aa
(check hostfingerprint configuration)
D:\repos>
----snip--------snip--------snip----
If you look carefully, it seems that Mercurial is only examining the first
fingerprint in the certificate. Perhaps a solution might be to allow the user
to specify the hash algorithm:
----snip--------snip--------snip----
bitbucket.org sha256 4E:65:3E:76 ...03:92:47
----snip--------snip--------snip----
When I enter the certificate's sha 1 fingerprint the problem goes away.
Please note that as of 1 January 2017 sha1 SSL certificates are deprecated.
CA's are no longer issuing them.
Perhaps I'm the first person to encounter this. We New Zealanders are used to
being the first in the world to experience timekeeping bugs! I suppose it
serves us right for living next to the International Date Line.
--
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
Mercurial-devel mailing list
Mercurial-devel@mercurial-scm.org
https://www.mercurial-scm.org/mailman/listinfo/mercurial-devel
