yeah updated mercurial works https://forum.nginx.org/read.php?2,283686,283694#msg-283694 though centos 7 still will use non-SNI supported mercurial 2.6.2 so folks doing hg clone for njs repo will always have this issue. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,283686,283695#msg-283695