I've been talking to Ben about this off the list, and it turns out my
checkouts still are not working. For Ben, the checkout succeeds after
several certificate prompts. For me (with both a Win2K and WinXP
client), the checkout fails (see message below) and the second prompt
doesn't actually wait for me to input anything.
I've created a test repository for you to reproduce this problem. Note
that this repository has *no* files in it, and it still causes me problems:
repository: https://svn.globalmentor.com/test
username: bcs
password: svn
D:\temp>svn co https://svn.globalmentor.com/test
Error validating server certificate: Unknown certificate issuer. Accept?
(y/N):
y
Error validating server certificate: Unknown certificate issuer. Accept?
(y/N):
Error validating server certificate: Unknown certificate issuer. Accept?
(y/N):
y
svn: RA layer request failed
svn: The path was not part of a repository
svn: PROPFIND request failed on '/'
svn: PROPFIND of '/': 403 Forbidden (https://svn.globalmentor.com)
I mentioned to Ben: Would the multiple prompts have anything to do with
the fact that the certificate I'm using is from InstantSSL, which
requires an extra CA certificate file to chain to the signing CA? (Other
providers, such as Verisign and Thawte, don't require this chaining
file---apparently because those CA's are already recognized by most
browsers, but InstantSSLS piggybacks off of Comodo or something. I
haven't researched exactly how it works.)
SSLCertificateFile /usr/share/ssl/certs/svn.globalmentor.com.crt
SSLCertificateKeyFile /usr/share/ssl/certs/svn.globalmentor.com.key
SSLCACertificateFile /usr/share/ssl/certs/instantssl-ca-bundle.txt
Garret
Ben Collins-Sussman wrote:
> Garret Wilson <garret@globalmentor.com> writes:
>
>
>>I just upgraded server and client to svn 0.25.0. Now, when I try to
>>check out something from a secure server, I get:
>>
>>Error validating server certificate: Unknown certificate
>>issuer. Accept? (y/N):
>>
>>That's expected. I hit "y", and get:
>>
>>Error validating server certificate: Unknown certificate
>>issuer. Accept? (y/N):
>>Error validating server certificate: Unknown certificate
>>issuer. Accept? (y/N):
>>
>>(Two in a row.) I hit "y" again, and get:
>>
>>svn: RA layer request failed
>>svn: The path was not part of a repository
>>svn: PROPFIND request failed on '/'
>>svn: PROPFIND of '/': 403 Forbidden (https://svn.globalmentor.com)
>>
>>Are there some install notes I missed for 0.25.0?
>
>
> I can't reproduce this error:
>
> $ svn ls https://svn.collab.net/repos/svn
> Error validating server certificate: Unknown certificate issuer. Accept? (y/N):
> y
>
> README
> branches/
> clients/
> tags/
> trunk/
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Thu Jul 17 16:47:50 2003