Bitbucket’s SSL certificates are changing

By on March 6, 2014

On March 7th at 22:00 UTC, we’ll be updating our SSL certificates to replace ones that will be expiring soon. It’s likely that you won’t notice any changes and won’t need to take any action. However, if you’re using Mercurial over HTTPS, you may see this error message:

abort: certificate for has unexpected fingerprint
(check hostfingerprint configuration)

If you see this error, you’ll need to update the host fingerprint for in your ~/.hgrc or Mercurial.ini configuration file:

[hostfingerprints] = 67:b3:bf:9f:c5:38:0e:4c:dd:4e:8a:da:3d:11:1b:c2:a5:d1:6c:6b

Thanks, and happy forking!

  • C. Artho

    I would prefer to see this information on a site hosted on https (using a certificate that Firefox accepts)…


    I just updated OS X to 10.9.2 and now Chrome refuses to load with this message:

    “Cannot connect to the real
    Something is currently interfering with your secure connection to”

    I get a slightly different message if I try to hit it with www. on the front:

    “The site’s security certificate is not trusted!”

    …and then it redirects to (sans www. prefix) and fails as above.

    Safari complains, as well, and states the certificate is invalid and (snippet key parts) says this:

    “This certificate was signed by an untrusted issuer.”

    Shows issuer as: DigiCert High Assurance EV CA-1
    Expires: Wednesday, May 25, 2016 at 5:00:00 AM MST

    Don’t know if anyone else is seeing this.

    • Glenn

      Yeah, I’m getting this. I also had the issue when connecting via HTTPS from Mercurial, and the above recommendation to update the .hgrc file worked for that. Still getting the certificate error in browsers though.

    • Jos Faber

      I’m having this one too for weeks now.

      • w p

        Yep me as well, still happening, chrome won’t let me get past it either.

  • Hector Malpica

    gist when you implement? (using mercurial)

  • hawken king

    ~/.hgrc? Where might this be? I am new to source tree and get this error, total noob, how do I find these files to edit them?

    • iLoveBitBucket

      ~/.hgrc means the following..
      ~ = home folder of the user in an linux installation (eg: /home/
      / = folder separator (no surprises there)
      .hgrc = is the config file that you need to edit

      so ~/.hgrc = /home//.hgrc

      Hope it helps.

  • markbitb

    I’m getting the SSL error when I try and view on chrome and phpstorm will not allow me to pull or push. Any suggestions?

  • Fran Hrženjak

    This is the third such entry in my .hgrc file, all different and added over the last few years. Why does this have to change so often? Or ever? Not that it’s a problem to put the line in, I’m just honestly curious here…