ssl - Using pip with 'insecure' mercurial -

is possible use pip requirements file install mercurial repository needs accessed using --insecure in order work.

the repository accessed via ssl, , due pip ignoring server name indication (sni), valid ssl certificate not being honoured (it uses main certificate ip address). --insecure gets round issue

ie:

hg clone https://username@domain.org/username/app_name --insecure 

so can this:

pip install -e hg+https://username@domain.org/username/app_name#egg=app_name 

or have following in pip requirements file:

hg+https://username@domain.org/username/app_name#egg=app_name 

neither of these work due ssl sni issue.

does have suggestions?

why don't try use [hostfingerprints] in ~/.hgrc?

for example:

[hostfingerprints] example.com = 38:76:52:7c:87:26:9a:8f:4a:f8:d3:de:08:45:3b:ea:d6:4b:ee:cc 

to obtain self-signed certificate, follow steps suggested in https://www.mercurial-scm.org/wiki/cacertificates

the root ca certificate server can example retrieved firefox. browse https://example.com/repo , verify repository trust, click lock symbol in lower right corner, view certificate, details, select certificate @ top of certificate hierarchy, export, "x.509 certificate (pem)" , save somewhere example server.pem. other browsers on windows have view certificate @ top of certification path , "copy file" "base-64 encoded x.509 (.cer)". several such files can concatenated 1 cacerts file.