[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: SASL for ra_svn on Windows

From: Stefan Küng <tortoisesvn_at_gmail.com>
Date: 2007-05-26 15:43:34 CEST

Vlad Georgescu wrote:
[snip]
> So, one way you can isolate yourself from other applications would be to
> install the SASL plugins in a TSVN-specific location and call the
> sasl_set_path() function before doing anything with Subversion, like this:
>
> if (sasl_set_path(SASL_PATH_TYPE_PLUGIN, "your path here") != SASL_OK)
> { /* handle error */ }

That would help, yes. But still not solve the problem: sasl would still
search the plugins in all the registered paths.

And since SASL is for authentication, I don't like the idea that even if
everything goes right with the installation/dll-loading, some other apps
could overwrite some SASL dlls with maybe insecure versions and my app
would then use those. That's also why OpenSSL recommends to not use it
as a dll but link it statically.

Stefan

-- 
        ___
   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest Interface to (Sub)Version Control
    /_/   \_\     http://tortoisesvn.net
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Sat May 26 15:43:51 2007

This is an archived mail posted to the Subversion Dev mailing list.