[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

[Subclipse-users] SSL client certificates + JavaHL

From: Jan Ploski <Jan.Ploski_at_offis.de>
Date: 2006-10-13 15:58:35 CEST

Hello,

I just installed Subclipse 1.0.3 and I am trying to get authentication
based on SSL client certificates (https) to work using JavaSVN.

Connecting to a repository using the command-line svn client works ok.

I inserted ssl-client-cert-prompt = yes in the [global] section of
~/.subversion/servers to make the "Provide SSL Client Certificate"
prompt appear. In the dialog, I select the same certificate file
which is used by the command-line clinet. After pressing OK, the dialog
simply appears again. And again, and so on, until I cancel. Nothing
is printed to the SVN console, nor to the Error Log.

On the server side, I set "ErrorLog debug" and can see the following
errors:

[debug] ssl_engine_kernel.c(1810): OpenSSL: Write: SSLv3 read client
certificate B
[debug] ssl_engine_kernel.c(1829): OpenSSL: Exit: error in SSLv3 read
client certificate B
[debug] ssl_engine_kernel.c(1829): OpenSSL: Exit: error in SSLv3 read
client certificate B
[info] SSL library error 1 in handshake (server
pcoffis26.offis.uni-oldenburg.de:443, client 134.106.52.79)
[info] SSL Library Error: 336105671 error:140890C7:SSL
routines:SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate No
CAs known to server for verification?
[info] Connection to child 2 closed with abortive shutdown(server
pcoffis26.offis.uni-oldenburg.de:443, client 134.106.52.79)

I am using JDK 1.5.0_03 with unlimited strength JCE policy files.

Is this a bug? Can anyone help?

Best regards,
Jan Ploski

--
Dipl.-Inform. (FH) Jan Ploski
OFFIS
Betriebliches Informationsmanagement
Escherweg 2  - 26121 Oldenburg - Germany
Fon: +49 441 9722 - 184 Fax: +49 441 9722 - 202
E-Mail: Jan.Ploski_at_offis.de - URL: http://www.offis.de
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subclipse.tigris.org
For additional commands, e-mail: users-help@subclipse.tigris.org
Received on Fri Oct 13 15:58:47 2006

This is an archived mail posted to the Subclipse Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.