[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

tortoise ssl works from one machine but not another

From: david m. chinn <dchinn_at_nwlink.com>
Date: 2007-12-13 09:49:39 CET

I've got subversion running on an apache server in my local net behind my
firewall.
I'm using client and server side certificates, signed by a local CA
(tinyCA).

Two machines pretty much identical have different results when trying to
checkout from the server.

 - the laptop works. I can have tsvn checkout a test repo...
https://myServer/svn/fooRepo works just fine.
 - the desktop doesn't. when I try to checkout from the same url, I get
different behavior.

The desktop will ask for a password for the .p12 client certificate (I'm
pretty sure that's where the password is going), where the laptop will ask
if it's okay to trust this server, and give a finger print.

When the correct password is typed in (for the desktop) I get the following
error message
Error: PROPFIND request failed on '/svn/fooRepo'
Error: PROPFIND of '/svn/fooRepo': SSL negotiation failed: SSL error: tlsv1
alert unknown ca (https://dev.hocprofessional.com)

The same CA certificate (.pem file) is installed in the trusted root CA
store on both browsers.
The same client certificate (.p12 file) is installed in the personal
certificate store on both browsers.
Both laptop and desktop have the same version of TSVN installed (the latest)
1.4.5 build 10425
Both machines have nothing in their server file

The error message indicates an untrusted ca... I've tried adding
'ssl-trust-default-ca = true' on the desktop - no change in behavior
I've tried adding a path to the ca certificate placed on the file system -
'ssl-authority-files = c:/foo/myCA.pem' - no good
I've tried resetting cached credentials in the 'saved data' screen

Help! Can someone tell me how TSVN finds its certificates (client, CA) if
there's nothing in the servers file?

Thanks in advance
Dmc_lat47

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tortoisesvn.tigris.org
For additional commands, e-mail: users-help@tortoisesvn.tigris.org

Received on Thu Dec 13 09:48:32 2007

This is an archived mail posted to the TortoiseSVN Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.