[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: TortoiseSVN with DoD CAC (Smart Card) configuration help

From: Stefan Küng <tortoisesvn_at_gmail.com>
Date: Thu, 29 Nov 2012 19:48:32 +0100

On 29.11.2012 18:33, Delmar Dale wrote:
> Ok here is another update with my issue. I finally got TortoiseSVN
> on my DoD PC (previously it was in a testlab only).
> Here is what works. The browser works perfectly authenticating with
> the CAC Card (smartcard from ActivIdentity)
> The Eclipse Plugin Subversive works perfectly as well
> TortoiseSVN does not work.
> I have the server setup to first look for a client certificate, and
> if that fails then ask for user/password.
> With Tortoise when I try to do a checkout, I am prompted to with a
> "Windows Security" screen to "Select a Certificate". When I select
> the certificate and click OK. I then get a user/pass prompt.
> I can see in the logs as soon as I click OK on the select the
> certificate screen that an error comes up in the access log like
> this.
> - - [29/Nov/2012....] "OPTIONS" /svn HTTP/1.1" 401 401
> I can see there is a "-" where normally I would expect the username
> to show up. With the browser this is populated with the subject of
> the client certificate. It seems to me that although I am selecting
> this certificate in TortoiseSVN it is not passing it to the
> webserver.
> Any assistance would be appreicated. I've got 200+ developers
> waiting for me to figure this out. I have been directed by the DoD
> that CAC login must be supported.


* Settings dialog->Network-​>Subversion servers file->Edit
    read the comments in the file, then set up your certificate file
    ssl-client-cert-file = path/to/your/cert/file
    and check if you can access the repository now
* also try the command line client (svn.exe)
* you might get better help on the svn users mailing list since this is
    a server setup issue, not really a client problem

   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest interface to (Sub)version control
    /_/   \_\     http://tortoisesvn.net
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2012-11-29 19:48:46 CET

This is an archived mail posted to the TortoiseSVN Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.