Index: publish/docs/release-notes/1.8.html =================================================================== --- publish/docs/release-notes/1.8.html (revision 1382005) +++ publish/docs/release-notes/1.8.html (working copy) @@ -265,6 +265,37 @@ +
+

Client prompting for SSL client certificates + +

+ +

Subversion has long supported the use of SSL client certificates +for authentication against a server which accepts such. Users +typically employ the ssl-client-cert-file option in their +'servers' runtime configuration file to inform the client regarding +the location of the relevant certificate file. In interactive +scenarios, Subversion can also prompt the user for the location of the +certificate file when that runtime-configured value isn't set or +otherwise suitable.

+ +

Prior to 1.8.0, this prompting was enabled by default. +Unfortunately, not every server which accepts client certificates +also requires them. Some users were being prompted for +client certificate file locations in scenarios where no certificate +was required (or perhaps even available). So in Subversion 1.8.0, the +Subversion client defaults to not prompting for the location +of an SSL client certificate file unless the user has set the new +ssl-client-cert-file-prompt runtime configuration +option (found in the [auth] section of the 'config' file) +to "yes".

+ +

See issue +#2410 for discussion and details.

+ +
+