Re: BUDDY: svn copy https-to-https gives "502 bad gateway"?

Jay Levitt <lists-svn@shopwatch.org> writes:
> I've seen this pop up several times around the net, without any
> resolution, so I expect it's a bug that just hasn't been logged in the
> issue tracker. But I'm being a good boy and using the buddy system...

Thanks :-).

I like the innovation of using the "BUDDY" keyword on the subject
line, and will keep an eye out for that in the future.

> I have a simple Apache-2.0.54-based subversion repository. I've
> restricted it to https only. It uses a VirtualHost domain, and sits
> in the root directory of that VirtualHost. (I wouldn't be surprised
> if this is part of the failcase.)
>
> I can svn add, delete, and checkout with no problem. But when I went
> to create my first tag:
>
> svn copy https://svn.example.com/sysadmin/trunk
> https://svn.example.com/sysadmin/tags/nearly-stock -m "Creating
> nearly-stock tag"
>
> I got a "502 Bad Gateway" error. Apache error log shows nothing but
> the usual trouble finding "error" files. Apache access log shows:
>
> 209.59.13.147 - - [10/Oct/2005:21:23:16 -0400] "PROPFIND /sysadmin
> HTTP/1.1" 403 - "-" "SVN/1.2.3 (r15833) neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "PROPFIND /sysadmin
> HTTP/1.1" 207 647 "-" "SVN/1.2.3 (r15833) neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "PROPFIND
> /sysadmin/!svn/vcc/default HTTP/1.1" 207 398 "-" "SVN/1.2.3 (r15833)
> neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "PROPFIND
> /sysadmin/!svn/bln/5 HTTP/1.1" 207 449 "-" "SVN/1.2.3 (r15833)
> neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "PROPFIND
> /sysadmin/trunk HTTP/1.1" 207 686 "-" "SVN/1.2.3 (r15833) neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "PROPFIND
> /sysadmin/!svn/vcc/default HTTP/1.1" 207 449 "-" "SVN/1.2.3 (r15833)
> neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "PROPFIND
> /sysadmin/!svn/bc/5/trunk HTTP/1.1" 207 696 "-" "SVN/1.2.3 (r15833)
> neon/0.24.7"
> 209.59.13.147 - - [10/Oct/2005:21:23:16 -0400] "PROPFIND
> /sysadmin/tags/nearly-stock HTTP/1.1" 403 - "-" "SVN/1.2.3 (r15833)
> neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "PROPFIND
> /sysadmin/tags HTTP/1.1" 207 684 "-" "SVN/1.2.3 (r15833) neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "PROPFIND
> /sysadmin/!svn/vcc/default HTTP/1.1" 207 449 "-" "SVN/1.2.3 (r15833)
> neon/0.24.7"
> 209.59.13.147 - - [10/Oct/2005:21:23:16 -0400] "PROPFIND
> /sysadmin/!svn/bc/5/tags/nearly-stock HTTP/1.1" 403 - "-" "SVN/1.2.3
> (r15833) neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "OPTIONS /sysadmin
> HTTP/1.1" 200 188 "-" "SVN/1.2.3 (r15833) neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "MKACTIVITY
> /sysadmin/!svn/act/4462355a-d002-0410-a46c-cf39b2a90e44 HTTP/1.1" 201
> 227 "-" "SVN/1.2.3 (r15833) neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "PROPFIND /sysadmin
> HTTP/1.1" 207 432 "-" "SVN/1.2.3 (r15833) neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "PROPFIND
> /sysadmin/!svn/vcc/default HTTP/1.1" 207 398 "-" "SVN/1.2.3 (r15833)
> neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "CHECKOUT
> /sysadmin/!svn/bln/5 HTTP/1.1" 201 241 "-" "SVN/1.2.3 (r15833)
> neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "PROPPATCH
> /sysadmin/!svn/wbl/4462355a-d002-0410-a46c-cf39b2a90e44/5 HTTP/1.1"
> 207 353 "-" "SVN/1.2.3 (r15833) neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "PROPFIND /sysadmin
> HTTP/1.1" 207 383 "-" "SVN/1.2.3 (r15833) neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "PROPFIND
> /sysadmin/tags HTTP/1.1" 207 684 "-" "SVN/1.2.3 (r15833) neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "PROPFIND
> /sysadmin/!svn/vcc/default HTTP/1.1" 207 449 "-" "SVN/1.2.3 (r15833)
> neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "PROPFIND
> /sysadmin/!svn/bc/5/tags HTTP/1.1" 207 402 "-" "SVN/1.2.3 (r15833)
> neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "CHECKOUT
> /sysadmin/!svn/ver/3/tags HTTP/1.1" 201 244 "-" "SVN/1.2.3 (r15833)
> neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "PROPFIND
> /sysadmin/trunk HTTP/1.1" 207 686 "-" "SVN/1.2.3 (r15833) neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "PROPFIND
> /sysadmin/!svn/vcc/default HTTP/1.1" 207 449 "-" "SVN/1.2.3 (r15833)
> neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "COPY
> /sysadmin/!svn/bc/5/trunk HTTP/1.1" 502 254 "-" "SVN/1.2.3 (r15833)
> neon/0.24.7"
> 209.59.13.147 - jay [10/Oct/2005:21:23:16 -0400] "DELETE
> /sysadmin/!svn/act/4462355a-d002-0410-a46c-cf39b2a90e44 HTTP/1.1" 204
> -
> "-" "SVN/1.2.3 (r15833) neon/0.24.7"
>
> The Apache config is:
>
> <VirtualHost *:443>
> ServerName svn.example.com
> CustomLog logs/svn.access.log combined
>
> # This must be accessible, but is otherwise unused
> DocumentRoot "/srv/www/htdocs/example.com/"
>
> <Location />
> AuthPAM_Enabled on
> AuthType Basic
> AuthName "Subversion repository"
> Require group svn
>
> DAV svn
> SVNParentPath "/srv/svn/"
> SVNPathAuthz off
> </Location>
>
> </VirtualHost>
>
> Other discussions of this problem:
>
> - Reports with no replies:
> http://subversion.tigris.org/servlets/ReadMsg?listName=users&msgNo=19652
> http://subversion.tigris.org/servlets/ReadMsg?listName=users&msgNo=27696
>
> - Report with custom proxy as workaround (!):
>
> http://vanderwijk.info/Members/ivo/articles/ComplexSVNSetupFix
>
> So.. thumbs up to log as an issue?

Well, before you do, have you checked the following as well? I did
Google{subversion https copy "bad gateway"} and got these links, among
others, which appear to be different from the above:

   http://svn.haxx.se/users/archive-2005-03/1452.shtml
   http://svn.haxx.se/users/archive-2005-03/1452.shtml

Due to a longstanding routing problem from my home machine, that I've
never figured out the cause of, it's hard for me to read stuff at the
haxx archives from home. But glancing at Google's cache, they seem to
be different messages. Also some of the other hits from that search
might be relevant.

If you've already done such a search, and concluded that none of the
results were relevant, then yes, I'd say it's time to file a bug. But
this sort of thing can easily be due to a proxy setup or some other
factor external to Subversion, so I want to make sure we've covered
all bases.

Oh, see also:

   http://www.linuxjournal.com/article/7655
   "Name-based virtual hosting cannot be used with SSL secure servers
    because of the nature of the SSL protocol"

Hmmm. There's a workaround there, might be worth trying.

-Karl

-- 
www.collab.net  <>  CollabNet  |  Distributed Development On Demand
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org