[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: [Subclipse-users] SSL client certificates + JavaHL

From: Mark Phippard <markp_at_softlanding.com>
Date: 2006-10-13 16:10:30 CEST

Jan Ploski <Jan.Ploski@offis.de> wrote on 10/13/2006 09:58:35 AM:

> I just installed Subclipse 1.0.3 and I am trying to get authentication
> based on SSL client certificates (https) to work using JavaSVN.
>
> Connecting to a repository using the command-line svn client works ok.
>
> I inserted ssl-client-cert-prompt = yes in the [global] section of
> ~/.subversion/servers to make the "Provide SSL Client Certificate"
> prompt appear. In the dialog, I select the same certificate file
> which is used by the command-line clinet. After pressing OK, the dialog
> simply appears again. And again, and so on, until I cancel. Nothing
> is printed to the SVN console, nor to the Error Log.
>
> On the server side, I set "ErrorLog debug" and can see the following
> errors:
>
> [debug] ssl_engine_kernel.c(1810): OpenSSL: Write: SSLv3 read client
> certificate B
> [debug] ssl_engine_kernel.c(1829): OpenSSL: Exit: error in SSLv3 read
> client certificate B
> [debug] ssl_engine_kernel.c(1829): OpenSSL: Exit: error in SSLv3 read
> client certificate B
> [info] SSL library error 1 in handshake (server
> pcoffis26.offis.uni-oldenburg.de:443, client 134.106.52.79)
> [info] SSL Library Error: 336105671 error:140890C7:SSL
> routines:SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate
No
> CAs known to server for verification?
> [info] Connection to child 2 closed with abortive shutdown(server
> pcoffis26.offis.uni-oldenburg.de:443, client 134.106.52.79)
>
> I am using JDK 1.5.0_03 with unlimited strength JCE policy files.
>
> Is this a bug? Can anyone help?

You might want to resend with the subject containing JavaSVN instead of
JavaHL so that Tmate sees it.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subclipse.tigris.org
For additional commands, e-mail: users-help@subclipse.tigris.org
Received on Fri Oct 13 16:10:40 2006

This is an archived mail posted to the Subclipse Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.