Mercurial CA Certificates

[Alexander Kapshuk]

On 08/30/2012 10:13 PM, Ruslan Mahmatkhanov wrote:
>>> As far I understand, FreeBSD doesn't come prepackaged with root CA
>>> certificates like other systems do (it's not 146%, but seems so). So,
>>> I'd follow recommendation from [1] in part "2.7. Other platforms".
>>>
>>> - download CA list from [2]
>>> - put this lines into your ~/.hgrc:
>>>
>>> [web]
>>> cacerts = /place/where/you/put/cacert.pem
>>>
>>> Hope this helps.
>>>
>>> [1] http://mercurial.selenic.com/wiki/CACertificates
>>> [2] http://curl.haxx.se/docs/caextract.html
>>>
>> OK. Thanks. I'll give that a try.
>
> Just realized that there is security/ca_root_nss that installs the 
> certs into /usr/local/share/certs and the port itself asks if you want 
> to create symlink to it in /etc/ssl/cert.pem. You may add any of them 
> into your ~/.hgrc. Please let me know if it works for you, and if it 
> is, it should be added into mercurial's wiki, and maybe to our 
> mercurial port as pkg-message or so.
I haven't had a chance to try your initial suggestion yet. I'm willing 
to give the security/ca_root_nss port a try first over the next couple 
of days.

I'll let you and the mailing list know how I go.

Thanks.