[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: [Subclipse-users] Problem with HTTPS

From: Alexander Kitaev <alex_at_tmate.org>
Date: 2006-02-10 14:44:54 CET

Hello Michal,

JavaSVN does support SSL client certificates and this feature works for most
of the users as far as I know. By default it takes certificate from the
"servers" file, and also Subclipse (when JavaSVN is used) may prompt for SSL
certificate and passphrase when the following property set in server's file


I would suggest you to do the following:

1. Try to put SSL client cert properties into "global" group, may be JavaSVN
fails to match your host name and find appropriate group.
2. Try to enable ssl-client-cert-prompt (Subclipse should prompt for SSL
certificate when JavaSVN is used).
3. Use latest version of JDK and install "unlimited strength" JCE - JavaSVN
relies on JDK SSL support, so older versions of JDK may not support SSL

To get "unlimited" JCE visit http://java.sun.com/products/jce/javase.html

Please let me know whether above helps or not - I will try to investigate
what could be the reason of the problem.

Alexander Kitaev,
TMate Software,

> -----Original Message-----
> From: Michal Niklas [mailto:michal.niklas@heuthes.pl]
> Sent: Friday, February 10, 2006 10:58 AM
> To: users@subclipse.tigris.org
> Subject: [Subclipse-users] Problem with HTTPS
> Hello,
> I would like to use HTTPS and it doesn't work for me.
> At first I configured Apache and created certificates.
> Now I tested it on my WinXP machine.
> Both svn and TurtoiseSVN asked me for file with certicicate
> and for password. Checkuot works with those tools.
> Now I tried Subclipse.
> In "Add a new SVN repository" I wanted to add the same URL I
> used in svn and Turtoise:
> https://warp.heuthes:443/svn/hdbj/trunk/
> First thing: this plugin doesn't ask me for certificate nor
> for password
> Second: it fails with message:
> Error validatin location:
> "org.tigris.subversion.javahl.ClientException:
> RA layer request failed
> svn: PROPFIND request failed on '/svn/hdbj/trunk'
> svn: PROPFIND of '/svn/hdbj/trunk': SSL negotiation failed:
> SSL error:
> unknown protocol (https://warp.heuthes)
> I have tried with other URLs like:
> https://warp.heuthes:443/svn/hdbj/trunk
> https://warp.heuthes:443/svn/hdbj/
> https://warp.heuthes:443/svn/hdbj
> but none seems to work.
> So I edited servers file in my:
> c:\Documents and Settings\mn\Dane aplikacji\Subversion
> direstory (Dane aplikacji is Polish name of Application Data).
> It stands:
> [groups]
> group_ht = *.heuthes
> [heuthes]
> ssl-client-cert-file=c:\keysl\mn@heuthes.pl.p12
> ssl-client-cert-password=******
> Then both cvs and TortoiseSVN works without asking me for
> certificate nor password. But Subclipse doesn't work :(
> I checked what is in Apache error log and it seems that
> Subclipse doesn't use certificate:
> [Thu Feb 09 12:28:38 2006] [info] Seeding PRNG with 136 bytes
> of entropy [Thu Feb 09 12:28:38 2006] [info] SSL library
> error 1 in handshake (server warp.heuthes:443, client
> [Thu Feb 09 12:28:38 2006] [info] SSL Library
> Error: 336105671 error:140890C7:SSL
> routines:SSL3_GET_CLIENT_CERTIFICATE:peer did not return a
> certificate No CAs known to server for verification?
> [Thu Feb 09 12:28:38 2006] [info] Connection to child 66
> closed with abortive shutdown(server warp.heuthes:443, client
> I have tried both JavaSVN and JavaHL interfaces but both with
> no success :( I have also set Configuration location to
> directory with servers file (in case if Dane aplikcacji were
> not recognized).
> Have I ommitted something in configuration?
> Regards,
> Michal Niklas
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subclipse.tigris.org
> For additional commands, e-mail: users-help@subclipse.tigris.org

To unsubscribe, e-mail: users-unsubscribe@subclipse.tigris.org
For additional commands, e-mail: users-help@subclipse.tigris.org
Received on Fri Feb 10 14:46:20 2006

This is an archived mail posted to the Subclipse Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.