[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

AW: parse tlsext bug

From: Sebastian Krysmanski <sebastian_at_krysmanski.de>
Date: Wed, 2 Sep 2009 07:13:49 +0200

Hmm, I think it's the other way around. I think the error only occurs when
OpenSSL is compiled with tlsext enabled and doesn't occur when tlsext is
disabled as on my system tlsext is enabled. However, I can't disable tlsext
on my OpenSSL installation as it's shipped with my Distro (Ubuntu 9.04) and
required by basic applications. (I fear I could break the system when I try
to replace the OpenSSL installation.) Moreover I think (but I'm not sure)
that this only affect the svn client but not the svn server (i.e. Apache's
mod_ssl).

I've also tried the configuration directive you provided but it didn't work.
The problem still remains.

Sebastian

-----Ursprüngliche Nachricht-----
Von: George Stein [mailto:svn.4.george_stein_at_spamgourmet.com]
Gesendet: Dienstag, 1. September 2009 14:10
An: users_at_subversion.tigris.org
Betreff: RE: parse tlsext bug

Sebastian,

I had a similar problem in Win32.

It might be caused when OpenSSL was built without enabling TLS extensions
[1,2].

As a workaround I set in httpd.conf [3,4]:
SSLProtocol -ALL +SSLv2 +SSLv3

George

[1] http://code.google.com/p/support/issues/detail?id=1395
[2] http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI
[3] http://www.svnforum.org/2017/viewtopic.php?t=8466
[4] http://www.modssl.org/docs/2.8/ssl_reference.html#ToC8

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=23
89739

To unsubscribe from this discussion, e-mail:
[users-unsubscribe_at_subversion.tigris.org].

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2390046

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].
Received on 2009-09-02 07:14:59 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.