Hard time to verify ssl server certificate.

Hello!

I used tinyca to create a CA and issued a server certificate that is
signed by this CA. Upon creation of the certificate, tinyca printed a
fingerprint of the freshly generated certificate. When I connect to
the server via konqueror or mozilla, the browser warns me that the
certificate is issued by an unknown CA and asks me to check the
fingerprint. Since the displayed fingerprint is the same that was
printed on certificate creation, I can confirm the check. Everything
fine that far.

But when I connect to the same sever with svn, and svn asks me to verify
the certificate, it prints me a completely _different_ fingerprint. Then
I go and say svn should accept the certificate permanently so that svn
saves the certificate in ~/.subversion/auth/svn.ssl.server directory.
When I compare this saved certificate with the one that is stored by
konqueror, the certificate is _identical_, but the file contains additional
information:

K 10
ascii_cert
V 1532
[ certificate goes here ]
K 15
svn:realmstring
V 25
https://my.server.org:443
K 8
failures
V 1
8
END

It appears that svn calculates the md5sum of the _whole_ file that is
stored in ~/.subversion/auth/svn.ssl.server directory. Instead, it
should extract the certificate and calculate the md5sum on the extracted
certificate only.

Is this a known problem? Or have I simply skrewed up my installation?

-- 
No software patents!
-- Josef Wolf -- jw@raven.inka.de --
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org