Bitbucket’s SSL certificates are changing

By on March 6, 2014

On March 7th at 22:00 UTC, we’ll be updating our SSL certificates to replace ones that will be expiring soon. It’s likely that you won’t notice any changes and won’t need to take any action. However, if you’re using Mercurial over HTTPS, you may see this error message:

abort: certificate for has unexpected fingerprint
(check hostfingerprint configuration)

If you see this error, you’ll need to update the host fingerprint for in your ~/.hgrc or Mercurial.ini configuration file:

[hostfingerprints] = 67:b3:bf:9f:c5:38:0e:4c:dd:4e:8a:da:3d:11:1b:c2:a5:d1:6c:6b

Thanks, and happy forking!


  • C. Artho
    Posted March 9, 2014 at 6:12 pm | Permalink

    I would prefer to see this information on a site hosted on https (using a certificate that Firefox accepts)…

    Posted March 10, 2014 at 12:41 pm | Permalink

    I just updated OS X to 10.9.2 and now Chrome refuses to load with this message:

    “Cannot connect to the real
    Something is currently interfering with your secure connection to”

    I get a slightly different message if I try to hit it with www. on the front:

    “The site’s security certificate is not trusted!”

    …and then it redirects to (sans www. prefix) and fails as above.

    Safari complains, as well, and states the certificate is invalid and (snippet key parts) says this:

    “This certificate was signed by an untrusted issuer.”

    Shows issuer as: DigiCert High Assurance EV CA-1
    Expires: Wednesday, May 25, 2016 at 5:00:00 AM MST

    Don’t know if anyone else is seeing this.

    • Glenn
      Posted March 10, 2014 at 6:49 pm | Permalink

      Yeah, I’m getting this. I also had the issue when connecting via HTTPS from Mercurial, and the above recommendation to update the .hgrc file worked for that. Still getting the certificate error in browsers though.

    • Posted August 12, 2014 at 6:47 am | Permalink

      I’m having this one too for weeks now.

      • w p
        Posted September 12, 2014 at 10:50 pm | Permalink

        Yep me as well, still happening, chrome won’t let me get past it either.

  • Hector Malpica
    Posted March 12, 2014 at 9:01 am | Permalink

    gist when you implement? (using mercurial)

  • Posted March 12, 2014 at 11:51 pm | Permalink

    ~/.hgrc? Where might this be? I am new to source tree and get this error, total noob, how do I find these files to edit them?

    • iLoveBitBucket
      Posted March 21, 2014 at 8:20 am | Permalink

      ~/.hgrc means the following..
      ~ = home folder of the user in an linux installation (eg: /home/
      / = folder separator (no surprises there)
      .hgrc = is the config file that you need to edit

      so ~/.hgrc = /home//.hgrc

      Hope it helps.

  • markbitb
    Posted March 16, 2014 at 5:18 pm | Permalink

    I’m getting the SSL error when I try and view on chrome and phpstorm will not allow me to pull or push. Any suggestions?

  • Fran Hrženjak
    Posted March 21, 2014 at 12:16 pm | Permalink

    This is the third such entry in my .hgrc file, all different and added over the last few years. Why does this have to change so often? Or ever? Not that it’s a problem to put the line in, I’m just honestly curious here…