Search code examples
sslmercurialtortoisehg

How to entirely disable SSL certificate checks in Mercurial / TortoiseHg?

I'm looking for a way to make --insecure option the default one for any hg \ TortoiseHg command.

Please don't write this is a bad practice - I aware about possible risks and consider they're fully acceptable.

Solution

  • Setting cacerts in the [web] section to the empty string looks to be the same thing. From the source:

    if cmdoptions.get('insecure', False):
    ui.setconfig('web', 'cacerts', '!', '--insecure')

    which the wiki confirms:

    Sometimes it may be expedient to disable security checks, for instance when dealing with hosts with self-signed certificates. This can be done by disabling the CA certificate configuration on the command line:

    hg push --config web.cacerts= https://self-signed-host/repo

    So putting cacerts=! in the [web] section of your global hgrc (/etc/mercurial/hgrc on linux-likes) will get you there.