5b281c69d7c3d44aeada5a1b0ed152d345adf2e8
galt
  Tue Nov 9 11:09:59 2021 -0800
Squashed commit of the following:

Adding new features to https like cert verification, error messages that work right with warn and errAbort and our GUI in hgCustom and hgHubConnect and also logging especially for CGIs of problem certs. Also added callback so that we can support multiple levels like warn instead of abort. Cert verify options controlled by env vars and also hg.conf variables for CGIs that use the cart. Added basic info about the new httpsCertCheck setting to various documents. Added -httpsCertCheck=[abort|warn|none] command-line option to the hubCheck utility. refs #28332, #28457, #28458

diff --git src/product/ex.hg.conf src/product/ex.hg.conf
index 2b56ae6..6623bf3 100644
--- src/product/ex.hg.conf
+++ src/product/ex.hg.conf
@@ -460,30 +460,34 @@
 # browser.javaScriptDir=js/<your logname>
 
 # enable user specific style directory (CSS files)
 # browser.styleDir=style-public
 
 # enable user specific style/images directory
 # browser.styleImagesDir=style/images-public
 
 # enable user specific css file
 # browser.style=/style/mystyle.css
 
 # enable user specific trix file for track search tool
 # does substitution on the $db variable
 # browser.trixPath=/gbdb/$db/trackDb.ix
 
+# HTTPS CERTIFICATE VERIFY
+# Options are abort, warn, or none (currently default is warn)
+#httpsCertCheck=warn
+
 # PROXY
 # enable http(s) proxy support in net.c
 #httpProxy=http://someProxyServer:3128
 #httpsProxy=http://someProxyServer:3128
 #ftpProxy=ftp://127.0.0.1:2121
 # if proxy server needs BASIC authentication
 #httpProxy=http://user:password@someProxyServer:3128
 #httpsProxy=http://user:password@someProxyServer:3128
 # if some domain suffixes should not be proxied:
 #noProxy=ucsc.edu,mit.edu,localhost,127.0.0.1
 
 # enable local file access for custom tracks
 # By default you have to supply http:// URLs for custom track data, e.g. in bigDataUrls
 # With this statement, you can allow loading from local files, as long as the path
 # starts with a specific prefix