[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: windows and ssl-ignore-unknown-ca = true

From: solo turn <soloturn99_at_yahoo.com>
Date: 2003-05-07 20:09:05 CEST

thanks! with this option it works.

but:
if you don't set these options, it does not work. i do not think the
file is the cause, it works for the proxy entries. and it behaves
like this if you store the values in the registry too ... so it seems
to be buglet ;)

in general:
i think these ssl options could be simpler. one option to continue or
not should be sufficient.

why? if you have a special case to trust, enter it in a dedicated
section, or you install the issuers certificate.

-s.

--- Patrick Mayweg <mayweg@qint.de> wrote:
> Hi Solo,
> you have to set ssl-ignore-host-mismatch = true and
> ssl-ignore-unknown-ca = true because your CA is not know and the
> name in
> the certificate does not match the name you specified in the url.
> For
> copying the file from unix, I fear that the different EOL maybe a
> source
> of problems.
> Regards,
> Patrick
>
> solo turn wrote:
>
> >i did:
> >- svn mkdir http://bla/trunk/d1 -m ""
> > svn mkdir http://bla/trunk/d2 -m ""
> >- copy the working "servers" file from unix to w2k
> > (unix, v 0.22 dev build)
> >- try true, yes, 0, 1
> >- svn up
> >
> >v0.21, w2k, acts as following, for all cases:
> >
> >$ svn up
> >Error validating server certificate: Unknown certificate issuer,
> >Hostname mismatch. Accept? (y/N): y
> >A d1
> >Error validating server certificate: Unknown certificate issuer,
> >Hostname mismatch. Accept? (y/N): svn: RA layer request failed
> >
> >bugs:
> >- it asks
> >- it does not wait for an answer,
> > when it asks a second time
> >- it stops, and leaves the working
> > copy in an inconsistent state
> > (you have to delete d1)
> >
> >
> >--- Ben Collins-Sussman <sussman@collab.net> wrote:
> >
> >
> >>solo turn <soloturn99@yahoo.com> writes:
> >>
> >>
> >>
> >>>i tried to enter it in the registry with true, 1, 0, but it
> seems
> >>>
> >>>
> >>not
> >>
> >>
> >>>to take it.
> >>>
> >>>
> >>Did you try "yes", as the svn book demonstrates?
> >>
> >>Also, you don't need to use the registry at all. You can edit a
> >>normal 'servers' config file. This is also discussed in the
> book:
> >>
> >> "On Win32 systems, Subversion creates a folder named
> >>Subversion,
> >> typically inside the Application Data area of the user's
> >>profile
> >> directory. However, on this platform the exact location
> >>differs
> >> from system to system, and is dictated by the Windows
> >>registry."
> >>
> >>
> >>
> >>
>
>---------------------------------------------------------------------
> >
> >
> >>To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
> >>For additional commands, e-mail: dev-help@subversion.tigris.org
> >>
> >>
> >>
> >
> >
> >__________________________________
> >Do you Yahoo!?
> >The New Yahoo! Search - Faster. Easier. Bingo.
> >http://search.yahoo.com
> >
>
>---------------------------------------------------------------------
> >To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
> >For additional commands, e-mail: dev-help@subversion.tigris.org
> >
> >
> >
>
>
>
>
---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: dev-help@subversion.tigris.org
>

__________________________________
Do you Yahoo!?
The New Yahoo! Search - Faster. Easier. Bingo.
http://search.yahoo.com

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Wed May 7 20:10:15 2003

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.