[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

svn fails to handle certificates with non-ascii characters

From: Anders Blomdell <anders.blomdell_at_control.lth.se>
Date: 2004-02-10 13:03:56 CET

When svn is presented a certificate that contains non ASCII characters, it
fails to present a proper user override.

> svn list https://server/svn/repos
svn: PROPFIND request failed on '/svn/repos'
svn: PROPFIND of '/svn/repos': Server certificate verification failed:
certificate issued for a different hostname, issuer is not trusted (https:
//server)
>

The problem seems to be that svn_utf_cstring_from_utf8 returns with an
error, and that aborts the user override dialogue (unfortunately without
stating that the coding of the certificate is in error).

Here is a failing key/certificate pair:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----

Regards

Anders Blomdell

------------------------------------------------------------------------------
  Anders Blomdell
  Department of Automatic Control Email: anders.blomdell@control.lth.se
  Lund Institute of Technology Phone: +46 46 222 4625
  Box 118, S-221 00 Lund, Sweden Fax: +46 46 138118

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Tue Feb 10 13:43:51 2004

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.