[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: 1.9.0-alpha1 up for testing/signing

From: Ben Reser <ben_at_reser.org>
Date: Tue, 25 Feb 2014 10:27:09 -0800

On 2/14/14, 11:44 AM, Ben Reser wrote:
> So far we have two known issues with this tarball:
>
> svn-populate-node-origins-index doesn't build with Visual Studio 2010, 2012, or
> 2013 due to the ' in the project's descriptions. Bert found and fixed this in
> http://svn.apache.org/r1568180
>
> Certificate validation failure. There was a missing initialization that will
> make certificates without subjectAltNames randomly fail to validate.
> svn.apache.org's certificate just so happens to be such a certificate. The bug
> is such that it will never allow a certificate to be validated that shouldn't
> be. Julian reported this here:
> https://mail-archives.apache.org/mod_mbox/subversion-dev/201402.mbox/%3C1392388334.48607.YahooMailNeo%40web87705.mail.ir2.yahoo.com%3E
> and I fixed the problem in http://svn.apache.org/r1568349
>
> I wasn't terribly inclined to re-roll 1.9.0-alpha for the first one, but the
> second one seems more critical since I'm guessing a lot of people will run into it.
>
> I'm not going to immediately run out and produce a new tarball since I suspect
> we may find more things, so please continue testing this and let me know if you
> find other things.

In this vein and Bert's comment on IRC about needing 4 patches to make SilkSVN
build based on 1.9.0-alpha1 I'm going to kill this one off and build a
1.9.0-alpha2 today.

Thanks for the testing everyone it has put us in a better position.
Received on 2014-02-25 19:27:43 CET

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.