5b281c69d7c3d44aeada5a1b0ed152d345adf2e8
galt
  Tue Nov 9 11:09:59 2021 -0800
Squashed commit of the following:

Adding new features to https like cert verification, error messages that work right with warn and errAbort and our GUI in hgCustom and hgHubConnect and also logging especially for CGIs of problem certs. Also added callback so that we can support multiple levels like warn instead of abort. Cert verify options controlled by env vars and also hg.conf variables for CGIs that use the cart. Added basic info about the new httpsCertCheck setting to various documents. Added -httpsCertCheck=[abort|warn|none] command-line option to the hubCheck utility. refs #28332, #28457, #28458

diff --git src/product/mirrorManual.txt src/product/mirrorManual.txt
index 5f1e332..121d8b6 100644
--- src/product/mirrorManual.txt
+++ src/product/mirrorManual.txt
@@ -1332,30 +1332,34 @@
 generally looks like this:
 
     hPrintf("<FORM ACTION=\"%s\" NAME=\"mainForm\" METHOD=%s>\n",
     getScriptName(), cartUsualString(cart, "formMethod", "POST"));
 
 If you add &formMethod=GET and a subsequently fetched form is still
 posting, you might need to alter the "<FORM..." statement to use the
 cartUsualString.
 
 The hg18 hgTracks config page generates a GET URL that is too long for
 FireFox, so after debugging hgTables, you will probably want to add
 &formMethod=POST to an URL (or clear cart, load session etc).
 
 One thing that does not work with GET is "upload file" inputs.
 
+# HTTPS Certificate Check for Verification Settings are: abort warn none
+# currently the default is warn
+httpsCertCheck=warn
+
 # Proxy support
 
 net.c now has support for http(s) proxy servers
 which may be required by some installations
 to get through the firewall to external resources
 such as (but not limited to) for example 
 bigWig or bigBed data via custom track bigDataUrl.
 
 One must add the setting "httpProxy", "httpsProxy", "ftpProxy" to hg.conf
 
     httpProxy=http://someProxyServer:3128
     httpsProxy=http://someProxyServer:3128
     ftpProxy=ftp://127.0.0.1:2121
 
 If the proxy server requires BASIC authentication