[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Secure repository access (https) plus Windows Seven CRL plus proxy equals slow authentication!

From: Davi Anabuki <listas_at_anabuki.com.br>
Date: Wed, 28 Sep 2011 17:19:50 -0300

Hi!

I had quite a lot of trouble identifying a problem that I had with
TortoiseSVN...
Basically, if I accessed the repository using HTTTP, it would work ok...
However, at the moment that I switched to HTTPS, Tortoise would take
up to 20 seconds before executing any operation (update, commit,
show log...).

After a long struggle, I found out that the problem is because Windows
Seven, whenever the user tries to connect with https, tries to connect
to WindowsUpdate's server, trying to download a new CRL (Certificate
Revogation List)... However, I am working behind a proxy, and the
request had to timeout, before Tortoise began to work... So, every
action would imply in a 15-20 seconds delay!

If I disable the CRL update (via Windows Group Policy), everything will
work just fine... However, if any application actually needs to download
the CRL, it won't download...

My question is if this happens by design, or if this should not happen...
And, also, if there is a different way to stop Tortoise's check for new
CRL's (all repositorys' server certificates that we use are self-generated,
so there is no need for this check, anyway...)

Thanks in advance,
Davi Anabuki.

------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2847275

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2011-09-28 22:23:22 CEST

This is an archived mail posted to the TortoiseSVN Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.