Is the proxy trying to spoof the https certificate (hg mercurial)?

Question

proxy

Hello!

Faced the following problem. I'm working behind a proxy and trying to push to bitbucket.org using mercurial hg.

pushing to https://[email protected]/user/project
warning: bitbucket.org certificate with fingerprint bf:8b:48:f8:a5:22:43:fd:d2:7
9:bc:1e:6b:c7:19:20:a6:ef:c5:ed not verified (check hostfingerprints or web.cace
rts config setting)
http authorization required
realm: Bitbucket.org HTTP

Google makes it clear that the correct fingerprint from bitbucket.org should start with 81:
That is, it turns out that the proxy intercepts the certificate that is sent by the server and tries to slip its own in order to decrypt the traffic.

According to the idea, you need to take the bitbucket.org certificate in the form of a file somewhere and install it in mercurial hg . What other ideas will there be?

Answer 1

If the certificate is really spoofed, then it remains only to try to bypass the proxy server that replaces it.