[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: Re: Problem accessing server using TLS1.2

From: Bartosz Brodecki <bartek_at_nsense.net>
Date: Tue, 8 Jan 2013 21:12:07 -0800 (PST)

Hi,

using serf library makes different error (but I get possibility to select user certificate):
Unable to connect to a repository at URL 'https://myserver/repo'
Error running context: An error occurred during SSL communication

And still TSVN start using TLS1.2.
I even upgraded TSVN to the newest nightly builds and still no luck.

I'm sure that TSVN start negotiation using TSVN 1.2 (I also use different apps that only support TLS 1.0, and there are no problem, and no TLS1.2 from the client).

Below is presented logs from apache server (with debug ssl):
[Wed Jan 09 04:35:40 2013] [debug] ssl_engine_kernel.c(1884): OpenSSL: Write: SSLv3 read client certificate B
[Wed Jan 09 04:35:40 2013] [debug] ssl_engine_kernel.c(1903): OpenSSL: Exit: error in SSLv3 read client certificate B
[Wed Jan 09 04:35:40 2013] [debug] ssl_engine_kernel.c(1903): OpenSSL: Exit: error in SSLv3 read client certificate B
[Wed Jan 09 04:35:40 2013] [info] [client xxx.xxx.0.6] SSL library error 1 in handshake (server myserver:443)
[Wed Jan 09 04:35:40 2013] [info] SSL Library Error: 336105671 error:140890C7:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate No CAs known to server for verification?
[Wed Jan 09 04:35:40 2013] [info] [client xxx.xxx.0.6] Connection closed to child 6 with abortive shutdown (server myserver:443)

From sniffer I see that there are some problems with sending client certificate. After packet with user certificate server drops connection (by sending error with handshake).

Please help.

Bartek

------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=3042006

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2013-01-09 13:55:36 CET

This is an archived mail posted to the TortoiseSVN Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.