Re: AW: CommitMonitor: Problem with client certificate authentication

On 19.02.2016 09:36, Stahn Roland wrote:
> Hi Stefan,
>
> thanks for the reply.
>
> Actually I have only a single client certificate installed. When it is present,
> CM will throw the mentioned error message while TSVN works fine.
> Using SysInternals Process Monitor I can see, that CM indeed is accessing
> the Windows storage only. On the other hand, if I remove that certificate
> from the Windows storage, CM is loading the certificate from disc storage
> as configured in the "servers" file. For some reason in this case the
> SSL connecting is successfully established. Are there any differences
> between a certificate loaded directly from a .p12 file and the very same
> certificate imported into the Windows storage?

I'm guessing that the certificate in the windows storage is not
*exactly* the same as the .p12 one you specify in the servers config
file, otherwise it would work.

Also: the certificate in the windows storage always takes precedence
over the one specified in the servers file: the windows storage one is
used by openssl directly, before the svn lib even gets a chance to do
the authentication.

You can disable the use of the windows storage certificate using the
registry key:

HKCU\Software\TortoiseSVN\OpenSSLCAPI

create this DWORD value and then set it to 0.

> Is there a way to force CM to ignore the windows storage?
> Unfortunately the certificate needs to be there in order to access some
> other (non-SVN) HTTP based services using a web browser.

The same registry key is also used by CM.

Stefan

-- 
        ___
   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest interface to (Sub)version control
    /_/   \_\     http://tortoisesvn.net
------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=3161711
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].