Re: tsvn 1.7.7 and later: client certificates: unsupported algorithm nid

On 28.10.2012 09:45, vario fox wrote:
> Hi Stefan,
>
> thanks for your suggestion and the great work in general. But no luck :-(
>
>
> With TortoiseSVN-1.7.10.23359-x64-svn-1.7.7 using [global] http-library = serf I get the following error:
>
> Unable to connect to a repository at URL 'https:.....'
> Error running context: APR does not understand this error code
>
> Apache log reports the same as with the default neon library:
>
> [debug] ssl_engine_io.c(1908): OpenSSL: I/O error, 5 bytes expected to read on BIO#7f3714ad3940 [mem: 7f3714c7ecc3]
> [debug] ssl_engine_kernel.c(1903): OpenSSL: Exit: error in SSLv3 read client certificate A
> [debug] ssl_engine_kernel.c(1903): OpenSSL: Exit: error in SSLv3 read client certificate A
> [info] [client 188.99.183.144] (70014)End of file found: SSL handshake interrupted by system [Hint: Stop button pressed in browser?!]
> [info] [client 188.99.183.144] Connection closed to child 0 with abortive shutdown (server vtx.ath.cx:443)
>
>
>
> With TortoiseSVN-1.7.6.22632-x64-svn-1.7.4 using [global] http-library = serf it works.
> TortoiseSVN-1.7.6.22632-x64-svn-1.7.4 also works with the default neon.
>
> Do you need me to go testing through the other versions?

I don't think that would help.

Searching the web for the error messages indicates that it's a problem
with the certificates and the trust chain:

http://fixunix.com/modssl/167053-problem-using-client-ssl-verify.html
http://www.dudek.org/blog/109 ("apache needs to understand you are
acting as your own certificate authority, and not depending on an
external one")

I couldn't find anything in the changelogs for Subversion that would
explain this. And apart from different svn versions, we only updated
OpenSSL during the recent releases.

Stefan

-- 
        ___
   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest Interface to (Sub)Version Control
    /_/   \_\     http://tortoisesvn.net
------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=3024021
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].