Branko Čibej wrote:
> I couldn't reproduce this, but then, I'm not using client
> certificates. So, it could either be a bug in the certificate
> handling code, or it could be a bug in the server. What server are
> you testing against? Is it on the same machine, so that your
> removing the "share" directory affects the server, too?
The client is running Windows XP with Subversion 1.2.3, the Server
uses Apache 2.0.54 on Linux, also with Subversion 1.2.3.
If I read the attached log excerpts right, Apache fails to extract
data from the client certificate when the SVN client is using
localized texts, because the user name recorded in the log is an
empty string instead of "John Doe".
I'm not sure if the CN part of the certificate is not found or if
other certificate data is affected, but as Apache can't figure out
who is trying to access the SVN repository, it returns "403
forbidden".
--
Mit freundlichen Grüßen / Sincerely
Dipl. Inform. Ralph Seichter
# Successfull access (client not localized)
123.234.123.234 - John Doe [28/Aug/2005:15:43:39 +0200] "PROPFIND /subversion/foo HTTP/1.1" 207 657
123.234.123.234 - John Doe [28/Aug/2005:15:43:39 +0200] "PROPFIND /subversion/foo/!svn/vcc/default HTTP/1.1" 207 409
123.234.123.234 - John Doe [28/Aug/2005:15:43:39 +0200] "PROPFIND /subversion/foo/!svn/bln/36 HTTP/1.1" 207 462
123.234.123.234 - John Doe [28/Aug/2005:15:43:39 +0200] "PROPFIND /subversion/foo/!svn/bc/36 HTTP/1.1" 207 668
123.234.123.234 - John Doe [28/Aug/2005:15:43:40 +0200] "REPORT https://server.dom.ain/subversion/foo HTTP/1.1" 200 112
123.234.123.234 - John Doe [28/Aug/2005:15:43:40 +0200] "PROPFIND /subversion/foo HTTP/1.1" 207 657
123.234.123.234 - John Doe [28/Aug/2005:15:43:40 +0200] "PROPFIND /subversion/foo/!svn/vcc/default HTTP/1.1" 207 409
123.234.123.234 - John Doe [28/Aug/2005:15:43:40 +0200] "PROPFIND /subversion/foo/!svn/bln/36 HTTP/1.1" 207 462
123.234.123.234 - John Doe [28/Aug/2005:15:43:40 +0200] "PROPFIND /subversion/foo HTTP/1.1" 207 657
123.234.123.234 - John Doe [28/Aug/2005:15:43:41 +0200] "REPORT /subversion/foo/!svn/vcc/default HTTP/1.1" 200 639
# Unsuccessfull access (client localized)
123.234.123.234 - - [28/Aug/2005:15:49:05 +0200] "PROPFIND /subversion/foo HTTP/1.1" 403 215
# Successfull access (client not localized)
[28/Aug/2005:15:43:39 +0200] 123.234.123.234 TLSv1 DHE-RSA-AES256-SHA "PROPFIND /subversion/foo HTTP/1.1" 657
[28/Aug/2005:15:43:39 +0200] 123.234.123.234 TLSv1 DHE-RSA-AES256-SHA "PROPFIND /subversion/foo/!svn/vcc/default HTTP/1.1" 409
[28/Aug/2005:15:43:39 +0200] 123.234.123.234 TLSv1 DHE-RSA-AES256-SHA "PROPFIND /subversion/foo/!svn/bln/36 HTTP/1.1" 462
[28/Aug/2005:15:43:39 +0200] 123.234.123.234 TLSv1 DHE-RSA-AES256-SHA "PROPFIND /subversion/foo/!svn/bc/36 HTTP/1.1" 668
[28/Aug/2005:15:43:40 +0200] 123.234.123.234 TLSv1 DHE-RSA-AES256-SHA "REPORT https://server.dom.ain/subversion/foo HTTP/1.1" 112
[28/Aug/2005:15:43:40 +0200] 123.234.123.234 TLSv1 DHE-RSA-AES256-SHA "PROPFIND /subversion/foo HTTP/1.1" 657
[28/Aug/2005:15:43:40 +0200] 123.234.123.234 TLSv1 DHE-RSA-AES256-SHA "PROPFIND /subversion/foo/!svn/vcc/default HTTP/1.1" 409
[28/Aug/2005:15:43:40 +0200] 123.234.123.234 TLSv1 DHE-RSA-AES256-SHA "PROPFIND /subversion/foo/!svn/bln/36 HTTP/1.1" 462
[28/Aug/2005:15:43:40 +0200] 123.234.123.234 TLSv1 DHE-RSA-AES256-SHA "PROPFIND /subversion/foo HTTP/1.1" 657
[28/Aug/2005:15:43:41 +0200] 123.234.123.234 TLSv1 DHE-RSA-AES256-SHA "REPORT /subversion/foo/!svn/vcc/default HTTP/1.1" 639
# Unsuccessfull access (client localized)
[28/Aug/2005:15:49:05 +0200] 123.234.123.234 TLSv1 DHE-RSA-AES256-SHA "PROPFIND /subversion/foo HTTP/1.1" 215
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Sun Aug 28 18:19:25 2005