" Mercurial versions 1.7.x and up require the configuration of Certification Authorities (CAs). Error messages of the form:

warning: code.google.com certificate with fingerprint b1:af: ... bc not verified (check hostfingerprints or web.cacerts config setting) "

Why can't you just take care of this at your end ... Why force users to deal with it ...