[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: mod_dav_svn behind a proxy

From: Rob van Oostrum <rob.vanoostrum_at_blastradius.com>
Date: 2006-01-20 20:54:28 CET

Make sure you also include a ProxyPassReverse directive for the mapping
back to the original URL. You might also have to put some SSLProxy
directives in, but I can't remember those details off the top of my
head.

That said, HTTPS -> HTTP proxying for SVN will not work for all SVN
commands (copy and move being two that come to mind).

This has everything to do with the fact that the 'to' URL is stored in
the body of the request, which is only decrypted after the proxy
configuration transforms the request URL. So after the SSL decrypt of
the request, your 'to' URL doesn't match your 'from' resulting in an
error.

The scheme will work fine for straight-forward checkout-modify-commit
use.

Any reason why you can't just host SVN directly under the HTTPS host?
You could always implement the scheme you described for any other
applications that aren't going to break through the HTTPS->HTTP proxy.

Cheers
Rob

-----Original Message-----
From: Florian Munz [mailto:newsletter@theflow.de]
Sent: Friday, January 20, 2006 8:28 AM
To: users@subversion.tigris.org
Subject: mod_dav_svn behind a proxy

Hello,

I am trying to set up a shared ssl domain in Apache so that I can access
all my repositories over https.

Example:

Repository under http://domain.com/svn/repos is set up using Location
/svn

Now I want to set up a domain shared-ssl.com under which this exact
repository is available under

https://shared-ssl.com/domain.com/svn/repos

This setup works with ProxyPass for simple html files, it fails for
every site which which uses absolute urls and it fails for mod_dav_svn
because it also uses absolute URLs in some of its requests (PROPFIND)

Is there a way to achive this or something similar?

thanks,
Florian

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Fri Jan 20 20:56:13 2006

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.