Hello Michal,
JavaSVN does support SSL client certificates and this feature works for most
of the users as far as I know. By default it takes certificate from the
"servers" file, and also Subclipse (when JavaSVN is used) may prompt for SSL
certificate and passphrase when the following property set in server's file
group:
ssl-client-cert-prompt=yes
I would suggest you to do the following:
1. Try to put SSL client cert properties into "global" group, may be JavaSVN
fails to match your host name and find appropriate group.
2. Try to enable ssl-client-cert-prompt (Subclipse should prompt for SSL
certificate when JavaSVN is used).
3. Use latest version of JDK and install "unlimited strength" JCE - JavaSVN
relies on JDK SSL support, so older versions of JDK may not support SSL
certificate.
To get "unlimited" JCE visit http://java.sun.com/products/jce/javase.html
Please let me know whether above helps or not - I will try to investigate
what could be the reason of the problem.
Thanks,
Alexander Kitaev,
TMate Software,
http://tmate.org/
http://jetbrains.com/tmate/
> -----Original Message-----
> From: Michal Niklas [mailto:michal.niklas@heuthes.pl]
> Sent: Friday, February 10, 2006 10:58 AM
> To: users@subclipse.tigris.org
> Subject: [Subclipse-users] Problem with HTTPS
>
> Hello,
>
> I would like to use HTTPS and it doesn't work for me.
> At first I configured Apache and created certificates.
> Now I tested it on my WinXP machine.
> Both svn and TurtoiseSVN asked me for file with certicicate
> and for password. Checkuot works with those tools.
>
> Now I tried Subclipse.
> In "Add a new SVN repository" I wanted to add the same URL I
> used in svn and Turtoise:
> https://warp.heuthes:443/svn/hdbj/trunk/
>
> First thing: this plugin doesn't ask me for certificate nor
> for password
> Second: it fails with message:
> Error validatin location:
> "org.tigris.subversion.javahl.ClientException:
> RA layer request failed
> svn: PROPFIND request failed on '/svn/hdbj/trunk'
> svn: PROPFIND of '/svn/hdbj/trunk': SSL negotiation failed:
> SSL error:
> unknown protocol (https://warp.heuthes)
>
> I have tried with other URLs like:
> https://warp.heuthes:443/svn/hdbj/trunk
> https://warp.heuthes:443/svn/hdbj/
> https://warp.heuthes:443/svn/hdbj
> but none seems to work.
>
> So I edited servers file in my:
> c:\Documents and Settings\mn\Dane aplikacji\Subversion
> direstory (Dane aplikacji is Polish name of Application Data).
> It stands:
>
> [groups]
> group_ht = *.heuthes
>
> [heuthes]
> ssl-client-cert-file=c:\keysl\mn@heuthes.pl.p12
> ssl-client-cert-password=******
>
> Then both cvs and TortoiseSVN works without asking me for
> certificate nor password. But Subclipse doesn't work :(
>
> I checked what is in Apache error log and it seems that
> Subclipse doesn't use certificate:
>
> [Thu Feb 09 12:28:38 2006] [info] Seeding PRNG with 136 bytes
> of entropy [Thu Feb 09 12:28:38 2006] [info] SSL library
> error 1 in handshake (server warp.heuthes:443, client
> 169.0.1.51) [Thu Feb 09 12:28:38 2006] [info] SSL Library
> Error: 336105671 error:140890C7:SSL
> routines:SSL3_GET_CLIENT_CERTIFICATE:peer did not return a
> certificate No CAs known to server for verification?
> [Thu Feb 09 12:28:38 2006] [info] Connection to child 66
> closed with abortive shutdown(server warp.heuthes:443, client
> 169.0.1.51)
>
> I have tried both JavaSVN and JavaHL interfaces but both with
> no success :( I have also set Configuration location to
> directory with servers file (in case if Dane aplikcacji were
> not recognized).
>
> Have I ommitted something in configuration?
>
> Regards,
> Michal Niklas
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subclipse.tigris.org
> For additional commands, e-mail: users-help@subclipse.tigris.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subclipse.tigris.org
For additional commands, e-mail: users-help@subclipse.tigris.org
Received on Fri Feb 10 14:46:20 2006