I believe when you have the SSLVerifyClient require directive inside the
<Location> node, apache does not ask for a client certificate during the
initial handshake. Only when you ask for a URL within that <Location>
does it ask for a client certificate, and svn doesn't seem to handle that.
Try moving the SSLVerifyClient directive to where you have the SSLEngine
On and SSLCertificateXXX directives, which in my case is in the virtual
host node.
This of course has the side effect of requiring ALL clients that connect
to the server to supply a valid certificate.
Ralph Seichter wrote:
> Here is the current configuration which I use for testing:
>
> <Location /subversion>
> DAV svn
> SVNParentPath /var/svn/repositories
> AuthzSVNAccessFile /var/svn/access
>
> Satisfy Any
> AuthType Basic
> AuthName "Subversion repository tree"
> AuthUserFile /var/svn/users
> Require valid-user
>
> SSLRequireSSL
> SSLVerifyClient require
> SSLVerifyDepth 2
> </Location>
>
> This setup requires both a client certificate and a user/password
> pair. It works as expected with Firefox when accessing URLs like
> <https://server.tld/subversion/project123/>, but not with the SVN
> client. Does the configuration look reasonable to you?
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Fri May 6 00:04:46 2005