i'm working upgrade our source control hg 1.6.0 1.8.2 , i'm looking set , use ssl certs. on windows server 2008 enterprise system running iis 6.0, not server need use versions of software right now. users running windows too.
to ease installation/configuration users i'd prefer modify windows cert store instead of cacert.pem file. mercurial have access windows certificate store? doesn't seem to. using internally created certificates , can things work without ssl warnings adding root cert cacert.pem file in mercurial can't seem work adding certs windows cert store. missing something?
thanks, scott
no, mercurial not access windows certificate store.
includes in distribution cacert.pm
(as know, though before 1.7.3, story bit different)
the article "x.509 certificates , mercurial" has more information.
a principal thing remember here mercurial not work complete server out of box, requesting authentication information, in form of basic, digest, or certificates, @ all.
means in order use x.509 certificates mercurial, 1 needs place web server knows of these authentication mechanisms in front of it.
this article includes makecert.exe
, knows windows certificates store (contrary mercurial itself)
makecert.exe
bit of different beastopenssl
interfaces directly machine’s or user’s certificate store (the special place certificates live happy life in windows).
Comments
Post a Comment