# see: http://mercurial.selenic.com/wiki/CACertificates [web] cacerts = /etc/pki/tls/certs/ca-bundle.crt