id	summary	reporter	owner	description	type	status	priority	milestone	version	resolution	keywords	cc
893	Mercurial source step needs username and passwd parms	bgunnison		"So we can get source from https URLs. 

My workaround:

I have a Repo URL of the form: 

MasterRepoURL = 'https://myusername:mypasswd@xxx.xxx.com/' 

I can put the above in the clear in master.cfg, but that is not safe.

I then did this:

import base64
passwd = base64.b64decode('rgthyde34=-') #not the real string obviously

MasterRepoURL =  'https://myusername:%s@xxx.xxx.com/' % passwd

This is better, as editors of master.cfg will have to do a bit of work, I’ll improve this by putting the base64 invocation in another file. 

Now the buildbot log files and the waterfall all have the password in the clear, so I modified buildstep.py where cmd.args is logged to not log if the dict contains “repourl”.



"	enhancement	closed	major	0.8.+	0.8.0	duplicate	hg