[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: Subversion Security

From: Rob van Oostrum <rob.vanoostrum_at_blastradius.com>
Date: 2005-09-21 01:42:28 CEST

SSL is the way to go. If security is a primary concern Win2k3 is not,
but that is a different debate altogether ;-)

Your problem is not with SVN but rather with creating your own SSL
certificates on a Windows platform.

For a Win32 port of OpenSSL look here:
http://www.slproweb.com/products/Win32OpenSSL.html

For a simple step-by-step on how to create your own SSL certificate and
install it on Apache, look here:
http://slacksite.com/apache/certificate.html

You can restrict any kind of access to the server by IP etc, but that
won't keep anyone from sniffing the line, so you do need SSL.

Cheers
Rob

-----Original Message-----
From: Friedman, Brad [mailto:Brad.Friedman@disa.mil]
Sent: Tuesday, September 20, 2005 7:30 PM
To: 'users@subversion.tigris.org'
Subject: Subversion Security

I have a Win2003 server running Apache2 and SVN. I am looking for the
best
solution for security over the internet. I tried setting up SSL but I
keep
getting errors with Ordinal 16 and when asked for missing DLL files I
loaded
them. There also seems to be some issues with the instructions from the
TortoiseSVN manuel. If you add and modify the httpd.conf your web server
will not start. I setup my server according to this site:
http://www.subversionary.org/node/61 which I got to work but I noticed
that
there is a difference in instructions from others . I was wondering what
others are using for security. I need worldwide access with something
that
is fairly easy to maintain. Can kerberos be used with SVN. I would
rather
not manage the certificates. I would greatly appreciate any of your
working
options as I seem to be stuck at this point. Thanks.
Brad

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Sep 21 01:44:58 2005

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.