On 25.10.2012 17:13, Joshua Kordani wrote:
> Greetings all.
>
> I am trying to use a smart card to authenticate myself to a
> repository.
>
> I can access many sites properly via a broadcom builtin reader and an
> omnikey 3021 usb reader. my card is a safenet borderless 400. I am
> running windows 7 ultimate 64 bit, and have attempted to use
> tortoisesvn 1.7.10 64bit, collabnet's binary relesae, and the wadisco
> client as well. With tortoisesvn, I am prompted multiple times to
> select a client cert (I am prompted with 2, which is correct enough)
> until eventually failing, instead of being presented with my password
> prompt. On all of the command line instances, I am presented with a
> dialog to pass in a client cert file, which I have attempted to do
> with a der x.509. once doing so, the prompt repeats 3 or 4 times
> before also failing. I want to get my hands dirty on this, so tell me
> where to look.
After it fails, what error message do you get?
TSVN unlike other svn clients presents you the Windows cert store dialog
from where you can select the cert. Other clients will ask you for a
cert file instead - which I find not as user friendly than the cert
store dialog.
TSVN then extracts the cert file from the Windows cert store and passes
that back to the svn library, that's why you see that difference in
behavior between svn clients.
> Since the repo is hosted over https I tried browsing to it, and oddly
> enough I can not browse to it with IE 64bit, but I can browse to it
> with IE 32 bit. When I use ie, I am only prompted with a gui to pick
> 1 cert (64bit fails never having asked for my pin), with tortoise svn
> I am prompted to pick from 2, and then never asks me for my pin and
> eventually fails.
The reason TSVN shows you a cert store dialog with two certs is that IE
knows which type of cert the server requests. TSVN does not know that
because that information is not passed back from the SSL/svn library to
TSVN.
Since IE x64 doesn't work either, I suspect that your certificate isn't
recognized properly. I guess at least one cert provider in the whole
cert chain is not recognized as trusted - you might have installed that
cert for the 32-bit version.
Also, try browsing to it with Firefox and/or Chrome instead of IE. Maybe
you'll get an error message there as well which might indicate what the
problem is.
Stefan
--
___
oo // \\ "De Chelonian Mobile"
(_,\/ \_/ \ TortoiseSVN
\ \_/_\_/> The coolest Interface to (Sub)Version Control
/_/ \_\ http://tortoisesvn.net
------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=3023517
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2012-10-25 20:07:20 CEST