Re: repository GUIDs

mark benedetto king wrote:

>On Thu, Dec 12, 2002 at 11:23:02PM +0100, Branko ?ibej wrote:
>
>
>>Wups!
>>
>>Why would you need a repository's private key in this strudture? That
>>info should never, ever be published. You only need the public key, or
>>rather, the (self-signer) certificate.
>>
>>
>>
>
>I think this an arguable point; it has to be stored somewhere on the
>server, unless you want to type it in by hand (rather than a decryption
>key for it) when it starts up.
>
>I'll grant that this does make it tricky to load the key/cert from
>removable media. :-)
>
>

Yes, it has to be somewhere on the server, but definitely not in the BDB
table that contains RepositoryID->GUID mappings for other repos, too.
The private key is one thing that should, IMHO, always stay in a file.

-- 
Brane Čibej   <brane_at_xbc.nu>   http://www.xbc.nu/brane/
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org