Bitbucket’s SSL certificates are changing

By on March 6, 2014

On March 7th at 22:00 UTC, we’ll be updating our SSL certificates to replace ones that will be expiring soon. It’s likely that you won’t notice any changes and won’t need to take any action. However, if you’re using Mercurial over HTTPS, you may see this error message:

abort: certificate for bitbucket.org has unexpected fingerprint
67:b3:bf:9f:c5:38:0e:4c:dd:4e:8a:da:3d:11:1b:c2:a5:d1:6c:6b
(check hostfingerprint configuration)

If you see this error, you’ll need to update the host fingerprint for bitbucket.org in your ~/.hgrc or Mercurial.ini configuration file:

[hostfingerprints]
bitbucket.org = 67:b3:bf:9f:c5:38:0e:4c:dd:4e:8a:da:3d:11:1b:c2:a5:d1:6c:6b

Thanks, and happy forking!

  • C. Artho

    I would prefer to see this information on a site hosted on https (using a certificate that Firefox accepts)…

  • StuffAndyMakes.com

    I just updated OS X to 10.9.2 and now Chrome refuses to load https://bitbucket.org with this message:

    “Cannot connect to the real bitbucket.org
    Something is currently interfering with your secure connection to bitbucket.org.”

    I get a slightly different message if I try to hit it with www. on the front:

    “The site’s security certificate is not trusted!”

    …and then it redirects to https://bitbucket.org (sans www. prefix) and fails as above.

    Safari complains, as well, and states the certificate is invalid and (snippet key parts) says this:

    “This certificate was signed by an untrusted issuer.”

    Shows issuer as: DigiCert High Assurance EV CA-1
    Expires: Wednesday, May 25, 2016 at 5:00:00 AM MST

    Don’t know if anyone else is seeing this.

    • Glenn

      Yeah, I’m getting this. I also had the issue when connecting via HTTPS from Mercurial, and the above recommendation to update the .hgrc file worked for that. Still getting the certificate error in browsers though.

  • Hector Malpica

    gist when you implement? (using mercurial)

  • http://hawkenking.com/ hawken king

    ~/.hgrc? Where might this be? I am new to source tree and get this error, total noob, how do I find these files to edit them?

    • iLoveBitBucket

      ~/.hgrc means the following..
      ~ = home folder of the user in an linux installation (eg: /home/
      / = folder separator (no surprises there)
      .hgrc = is the config file that you need to edit

      so ~/.hgrc = /home//.hgrc

      Hope it helps.

  • markbitb

    I’m getting the SSL error when I try and view bitbuget.org on chrome and phpstorm will not allow me to pull or push. Any suggestions?

  • Fran Hrženjak

    This is the third such entry in my .hgrc file, all different and added over the last few years. Why does this have to change so often? Or ever? Not that it’s a problem to put the line in, I’m just honestly curious here…