I think this is partly related to issue #1307.
http://subversion.tigris.org/issues/show_bug.cgi?id=1307
Here is the link to my original message which is similar to the problem
you describe for the second prompt.
http://www.contactor.se/~dast/svn/archive-2003-04/1502.shtml
I've also added an alternative patch to the issue which tries to fix this
another way.
Regards,
Chris
----- Original Message -----
From: "Garret Wilson" <garret@globalmentor.com>
To: "Ben Collins-Sussman" <sussman@collab.net>
Cc: <dev@subversion.tigris.org>
Sent: Thursday, July 17, 2003 3:45 PM
Subject: Re: certificate problems and 403 Forbidden for svn 0.25.0
> I've been talking to Ben about this off the list, and it turns out my
> checkouts still are not working. For Ben, the checkout succeeds after
> several certificate prompts. For me (with both a Win2K and WinXP
> client), the checkout fails (see message below) and the second prompt
> doesn't actually wait for me to input anything.
>
> I've created a test repository for you to reproduce this problem. Note
> that this repository has *no* files in it, and it still causes me problems:
>
> repository: https://svn.globalmentor.com/test
> username: bcs
> password: svn
>
> D:\temp>svn co https://svn.globalmentor.com/test
> Error validating server certificate: Unknown certificate issuer. Accept?
> (y/N):
> y
> Error validating server certificate: Unknown certificate issuer. Accept?
> (y/N):
> Error validating server certificate: Unknown certificate issuer. Accept?
> (y/N):
> y
> svn: RA layer request failed
> svn: The path was not part of a repository
> svn: PROPFIND request failed on '/'
> svn: PROPFIND of '/': 403 Forbidden (https://svn.globalmentor.com)
>
> I mentioned to Ben: Would the multiple prompts have anything to do with
> the fact that the certificate I'm using is from InstantSSL, which
> requires an extra CA certificate file to chain to the signing CA? (Other
> providers, such as Verisign and Thawte, don't require this chaining
> file---apparently because those CA's are already recognized by most
> browsers, but InstantSSLS piggybacks off of Comodo or something. I
> haven't researched exactly how it works.)
>
> SSLCertificateFile /usr/share/ssl/certs/svn.globalmentor.com.crt
> SSLCertificateKeyFile /usr/share/ssl/certs/svn.globalmentor.com.key
> SSLCACertificateFile /usr/share/ssl/certs/instantssl-ca-bundle.txt
>
> Garret
>
> Ben Collins-Sussman wrote:
> > Garret Wilson <garret@globalmentor.com> writes:
> >
> >
> >>I just upgraded server and client to svn 0.25.0. Now, when I try to
> >>check out something from a secure server, I get:
> >>
> >>Error validating server certificate: Unknown certificate
> >>issuer. Accept? (y/N):
> >>
> >>That's expected. I hit "y", and get:
> >>
> >>Error validating server certificate: Unknown certificate
> >>issuer. Accept? (y/N):
> >>Error validating server certificate: Unknown certificate
> >>issuer. Accept? (y/N):
> >>
> >>(Two in a row.) I hit "y" again, and get:
> >>
> >>svn: RA layer request failed
> >>svn: The path was not part of a repository
> >>svn: PROPFIND request failed on '/'
> >>svn: PROPFIND of '/': 403 Forbidden (https://svn.globalmentor.com)
> >>
> >>Are there some install notes I missed for 0.25.0?
> >
> >
> > I can't reproduce this error:
> >
> > $ svn ls https://svn.collab.net/repos/svn
> > Error validating server certificate: Unknown certificate issuer. Accept? (y/N):
> > y
> >
> > README
> > branches/
> > clients/
> > tags/
> > trunk/
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: dev-help@subversion.tigris.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Thu Jul 17 23:31:50 2003