[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Copy and move operations break over a separate https proxy

From: Ivan K <isoft_at_appdg.com>
Date: 2005-02-03 18:42:56 CET

Dear Sirs:

This issue was experienced before, but somehow it's not logged anywhere on the tigris'es issue tracker - well, it could not find it.

Here is my description of a problem:

1. Our svn is running on Linux Fedora-2:

httpd-2.0.50-2.1
subversion-1.1.1-0.1.1.fc2.rf
neon-0.24.7-2.1

and Win2K/XP (also v.1.1.1, client only).

2. We can access it from Win machines internally over http or externally over https, which is implemented by a SonicWall-R SSL accelerator (a hardware box configured as a router/proxy combo).

3. Svn works fine over http, but breaks when using https on "copy" and "move" commands with a message:

svn: COPY of aaa: 502 Bad Gateway (https://hostname)

Apache log shows something like:

212.118.2.62 - ivan [03/Feb/2005:10:24:27 -0600] "COPY /svn/hce/!svn/bc/2/trunk HTTP/1.1" 502 325 "-" "SVN/1.1.1 (r11581) neon/0.24.7"

4. Here are the previous reports of this problem, according to Google:
http://svn.haxx.se/dev/archive-2004-08/0286.shtml
http://vanderwijk.info/Members/ivo/articles/ComplexSVNSetupFix
Ivo van der Wijk (the second link) provides gory networking details with a possible fix suggestion.

IMHO, the implementation of the SSL protocol in a separate box and/or program (be it a proxy or an accelerator/load balancer) is a rather popular option today and the issue deserves attention.

The two work-arounds are
1) Allow open http access to a svn repository from outside if the security situation permits
2) Configure SSL mode in Apache

Sincerely,
Ivan

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Thu Feb 3 21:59:34 2005

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.