id,summary,reporter,owner,description,type,status,priority,milestone,version,resolution,keywords,cc
893,Mercurial source step needs username and passwd parms,bgunnison,,"So we can get source from https URLs. 

My workaround:

I have a Repo URL of the form: 

MasterRepoURL = 'https://myusername:mypasswd@xxx.xxx.com/' 

I can put the above in the clear in master.cfg, but that is not safe.

I then did this:

import base64
passwd = base64.b64decode('rgthyde34=-') #not the real string obviously

MasterRepoURL =  'https://myusername:%s@xxx.xxx.com/' % passwd

This is better, as editors of master.cfg will have to do a bit of work, I’ll improve this by putting the base64 invocation in another file. 

Now the buildbot log files and the waterfall all have the password in the clear, so I modified buildstep.py where cmd.args is logged to not log if the dict contains “repourl”.



",enhancement,closed,major,0.8.+,0.8.0,duplicate,hg,