Re: Trouble with svnsync using SSL and self-signed certificates

Sander Marechal wrote:
> Hello all,
>
> I have a problem using svnsync to create a mirror of my subversion
> repository. The remote server I want to mirror to runs Subversion on
> Apache with SSL enabled. It uses a self-signed certificate. I want to
> run the svnsync command in a port-commit on the local server. The local
> server runs Subversion under user "svn" which has no home directory and
> no login shell (A typical system user).
>
> My problem: Every time I try to sync, the svnsync program throws a
> warning about the certificate being untrusted and asks if I want to
> reject, accept temporarily or accept permanently. It doesn't matter that
> I tell it to accept the certificate permanently, it will still warn me
> again next time and ask for user input. Ofcourse, the default action is
> to deny, so telling svnsync to not ask interactive questions also does
> not solve this.

I found the solution to this problem. It's a combination of two problems:

1) You can only accept certificates permanently wehn the user has a home
directory. Only logical and not much you can do about this.

2) the svnsync command does not create the ~/.subversion directory when
it runs. Only the svn command creates that/ IMHO that's a bug that
should be fixed.

So, I su'ed to the svn server user, did a dummy "svn export" to /tmp
(which I deleted again) to create ~/.subversion and then I could
permanently accept the remote SSL certificate from svnsync.

-- 
Sander Marechal http://www.jejik.com
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org