@ -309,7 +309,7 @@ if not HAS_MATCH_HOSTNAME:
# ca cert, regardless of validity, for Python on Mac OS to use the
# ca cert, regardless of validity, for Python on Mac OS to use the
# keychain functionality in OpenSSL for validating SSL certificates.
# keychain functionality in OpenSSL for validating SSL certificates.
# See: http://mercurial.selenic.com/wiki/CACertificates#Mac_OS_X_10.6_and_higher
# See: http://mercurial.selenic.com/wiki/CACertificates#Mac_OS_X_10.6_and_higher
DUMMY_CA_CERT = """ -----BEGIN CERTIFICATE-----
b_ DUMMY_CA_CERT = b ( """ -----BEGIN CERTIFICATE-----
MIICvDCCAiWgAwIBAgIJAO8E12S7 / qEpMA0GCSqGSIb3DQEBBQUAMEkxCzAJBgNV
MIICvDCCAiWgAwIBAgIJAO8E12S7 / qEpMA0GCSqGSIb3DQEBBQUAMEkxCzAJBgNV
BAYTAlVTMRcwFQYDVQQIEw5Ob3J0aCBDYXJvbGluYTEPMA0GA1UEBxMGRHVyaGFt
BAYTAlVTMRcwFQYDVQQIEw5Ob3J0aCBDYXJvbGluYTEPMA0GA1UEBxMGRHVyaGFt
MRAwDgYDVQQKEwdBbnNpYmxlMB4XDTE0MDMxODIyMDAyMloXDTI0MDMxNTIyMDAy
MRAwDgYDVQQKEwdBbnNpYmxlMB4XDTE0MDMxODIyMDAyMloXDTI0MDMxNTIyMDAy
@ -326,7 +326,7 @@ MUB80IR6knq9K/tY+hvPsZer6eFMzO3JGkRFBh2kn6JdMDnhYGX7AXVHGflrwNQH
qFy + aenWXsC0ZvrikFxbQnX8GVtDADtVznxOi7XzFw7JOxdsVrpXgSN0eh0aMzvV
qFy + aenWXsC0ZvrikFxbQnX8GVtDADtVznxOi7XzFw7JOxdsVrpXgSN0eh0aMzvV
zKPZsZ2miVGclicJHzm5q080b1p / sZtuKIEZk6vZqEg =
zKPZsZ2miVGclicJHzm5q080b1p / sZtuKIEZk6vZqEg =
- - - - - END CERTIFICATE - - - - -
- - - - - END CERTIFICATE - - - - -
"""
""" )
#
#
# Exceptions
# Exceptions
@ -603,7 +603,7 @@ class SSLValidationHandler(urllib_request.BaseHandler):
# Write the dummy ca cert if we are running on Mac OS X
# Write the dummy ca cert if we are running on Mac OS X
if system == ' Darwin ' :
if system == ' Darwin ' :
os . write ( tmp_fd , DUMMY_CA_CERT)
os . write ( tmp_fd , b_ DUMMY_CA_CERT)
# Default Homebrew path for OpenSSL certs
# Default Homebrew path for OpenSSL certs
paths_checked . append ( ' /usr/local/etc/openssl ' )
paths_checked . append ( ' /usr/local/etc/openssl ' )