[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

HTTPS Problem

From: Geoff Beaumont <geoffbeaumont_at_stormhammer.com>
Date: 2003-06-21 17:44:29 CEST

Has anyone run into this problem before?:

I have a subversion repository set up on my server, accessed using
Apache2/WebDAV only. The repository is protected using basic authentication.

This all works fine, however I need to encrypt traffic to the repository and
when I switch on HTTPS svn access fails with the following error:

svn: RA layer request failed
svn: The path was not part of a repository
svn: PROPFIND of /: Could not read status line: SSL error: sslv3 alert
unexpected message

At the same time, the following is recorded in the Apache error log:

[Sat Jun 21 17:11:42 2003] [error] Re-negotiation handshake failed: Not
accepted by client!?
[Sat Jun 21 17:11:42 2003] [error] Re-negotiation handshake failed: Not
accepted by client!?
[Sat Jun 21 17:11:42 2003] [error] Re-negotiation handshake failed: Not
accepted by client!?
[Sat Jun 21 17:11:43 2003] [notice] child pid 11488 exit signal Segmentation
fault (11)

I get this message regardless of whether authorisation is required by Apache
or not.

svn isn't the only thing that has problems - Konqueror returns a 401
Authorisation Required error if both HTTPS and required authentication are
on, but can handle either by themselves.

Mozilla, however, works fine with HTTPS & authentication, allowing me to
browse the repository.

The SSL server certificate is a 128bit one created using the standard apache
tools - it isn't signed by a recognised authority (the usual Snake Oil Ltd,
CA ;c), but as it works fine in Konqueror when not using authentication, I
don't think this is the problem.

I don't_ think this is a Subversion problem as such - more likely Apache,
since it's affecting Konqueror too, and I have the same issues accessing a
web page outside the Subversion repository - however, as svn is the only tool
giving remotely helpful feedback, I hoped someone here might be able to shed
some light?

-- 
Geoff Beaumont
Geoff@stormhammer.com
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Sat Jun 21 17:45:32 2003

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.