AW: CommitMonitor: Problem with client certificate authentication

Hi Stefan,

thanks for the reply.

Actually I have only a single client certificate installed. When it is present,
CM will throw the mentioned error message while TSVN works fine.
Using SysInternals Process Monitor I can see, that CM indeed is accessing
the Windows storage only. On the other hand, if I remove that certificate
from the Windows storage, CM is loading the certificate from disc storage
as configured in the "servers" file. For some reason in this case the
SSL connecting is successfully established. Are there any differences
between a certificate loaded directly from a .p12 file and the very same
certificate imported into the Windows storage?

Is there a way to force CM to ignore the windows storage?
Unfortunately the certificate needs to be there in order to access some
other (non-SVN) HTTP based services using a web browser.

Kind regards,

Roland

Pepperl+Fuchs GmbH, Mannheim
Geschaeftsfuehrer/Managing Directors: Dr.-Ing. Gunther Kegel (Vors./CEO), Dr.-Ing. Peter Adolphs, Werner Guthier, Mehmet Hatiboglu
Vorsitzender des Aufsichtsrats/Chairman of the supervisory board: Claus Michael
Registergericht/Register Court: AG Mannheim HRB 4713
-----Ursprüngliche Nachricht-----
Von: Stefan Küng [mailto:tortoisesvn_at_gmail.com]
Gesendet: Donnerstag, 18. Februar 2016 19:03
An: users_at_tortoisesvn.tigris.org
Betreff: Re: CommitMonitor: Problem with client certificate authentication

On 18.02.2016 10:00, Stahn Roland wrote:
> Hi,
>
> I use both Commit Monitor 1.11.1.1099 (64bit) and TortoiseSVN 1.9.2
> (64bit) to access a SVN repository with client certificate
> authentication. This used to work fine.
>
> After an OS upgrade on the server side (no settings changed) I face a
> strange problem regarding the client certificate authentication.
>
> TortoiseSVN can access the repository without any problem, but Commit
> Monitor reports “An error occurs during SSL communication”.
>
> I have tracked down the symptoms to the following point:
>
> Commit Monitor fails to access the server, if the client certificate is
> present in the Windows certificate storage.
>
> If I remove it from the Windows storage and configure it in the
> “servers” file only, then Commit Monitor is suddenly able to access the
> repository.
>
> TortoiseSVN (and its Project Monitor) is able to connect to the server
> in either configuration.
>
> Are there any important configuration differences between Commit Monitor
> and TortoiseSVN that I am not aware of?
>

One difference is that TSVN can handle situations where multiple
matching certificates are in the local store: it then shows a dialog
where you can select the correct certificate, and it then saves that
certificate and doesn't ask anymore for it.
CM always uses the first certificate that matches the server request -
whether that certificate is still valid or not. It never shows a cert
selection dialog.

Stefan

--
        ___
   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest interface to (Sub)version control
    /_/   \_\     http://tortoisesvn.net
------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=3161473
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
Wichtiger Hinweis:
Diese E-Mail einschliesslich ihrer Anhaenge enthaelt vertrauliche und
rechtlich geschuetzte Informationen, die nur fuer den Adressaten bestimmt sind.
Sollten Sie nicht der bezeichnete Adressat sein, so teilen Sie dies bitte dem
Absender umgehend mit und loeschen Sie diese Nachricht und ihre Anhaenge. Die
unbefugte Weitergabe, das Anfertigen von Kopien und jede Veraenderung der E-Mail
ist untersagt. Der Absender haftet nicht fuer Inhalte von veraenderten
E-Mails.
Important Information:
This e-mail message including its attachments contains confidential and legally protected information solely intended for the addressee. If you are not the intended addressee of this message, please contact the addresser immediately and delete this message including its attachments. The unauthorized dissemination, copying and change of this e-mail are strictly forbidden. The addresser shall not be liable for the content of such changed e-mails.
------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=3161626
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].