[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: [Subclipse-dev] Problem with JavaHL accepting SSL certificates temporary

From: Mark Phippard <MarkP_at_softlanding.com>
Date: 2005-06-22 19:36:19 CEST

Meant to send to the Subversion list.


Mark Phippard <MarkP@softlanding.com> wrote on 06/22/2005 01:35:27 PM:

> We have had a problem come up in Subclipse relating to accepting SSL
> certificates. If the user takes the option (provided from JavaHL) to
> accept the certificate temporarily, then only the initial request works.

> Any subsequent requests to that server fail due to an invalid
> In the best case scenario, some sort of temporary caching should be
> performed as the "Temporary" option verbage sugests. In the worst case
> the user should be prompted every time. What is happening is that all
> subsequent requests are acting as if they rejected the certificate,
> is worse than the worst case. This is the error you get:
> org.tigris.subversion.javahl.ClientException: RA layer request failed
> svn: PROPFIND request failed on '/repos/svn'
> svn: PROPFIND of '/repos/svn': Server certificate verification failed:
> issuer is not trusted (https://svn.collab.net)
> I have attached a patch for the JavaHL test suite that demonstrates the
> problem. It uses the Subversion SSL repository for the test, so if you
> have already accepted that certificate you have to first remove it from
> your configuration area to see the problem.
> The attached patch contains 2 other changes, which you can ignore.
> 1) I changed the default repository type for the tests from BDB to
> 2) There is a new merge test I added back during the 1.2 RC period when

> there was a failure in JavaHL merge. I just haven't removed the test
> it is possible you might want to add it to the test suite.

Scanned for SoftLanding Systems, Inc. by IBM Email Security Management Services powered by MessageLabs.
Received on Thu Jun 23 03:36:19 2005

This is an archived mail posted to the Subclipse Dev mailing list.