AW: parse tlsext bug

Since I'm the only one interested in this issue (at least it seems that way) and nobody else seems to care (neither here nor in the IRC channel) I'm "closing" this issue by removing myself from this mailing list. Hopefully a lot of other people will encounter this problem in the future so that it'll be noticed by the developers. But until then it seems as if I've no choice but stick with Apache 2.2.11.

Sebastian

-----Ursprüngliche Nachricht-----
Von: Sebastian Krysmanski [mailto:sebastian_at_krysmanski.de]
Gesendet: Mittwoch, 2. September 2009 07:14
An: users_at_subversion.tigris.org
Betreff: AW: parse tlsext bug

Hmm, I think it's the other way around. I think the error only occurs when
OpenSSL is compiled with tlsext enabled and doesn't occur when tlsext is
disabled as on my system tlsext is enabled. However, I can't disable tlsext
on my OpenSSL installation as it's shipped with my Distro (Ubuntu 9.04) and
required by basic applications. (I fear I could break the system when I try
to replace the OpenSSL installation.) Moreover I think (but I'm not sure)
that this only affect the svn client but not the svn server (i.e. Apache's
mod_ssl).

I've also tried the configuration directive you provided but it didn't work.
The problem still remains.

Sebastian

-----Ursprüngliche Nachricht-----
Von: George Stein [mailto:svn.4.george_stein_at_spamgourmet.com]
Gesendet: Dienstag, 1. September 2009 14:10
An: users_at_subversion.tigris.org
Betreff: RE: parse tlsext bug

Sebastian,

I had a similar problem in Win32.

It might be caused when OpenSSL was built without enabling TLS extensions
[1,2].

As a workaround I set in httpd.conf [3,4]:
SSLProtocol -ALL +SSLv2 +SSLv3

George

[1] http://code.google.com/p/support/issues/detail?id=1395
[2] http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI
[3] http://www.svnforum.org/2017/viewtopic.php?t=8466
[4] http://www.modssl.org/docs/2.8/ssl_reference.html#ToC8

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=23
89739

To unsubscribe from this discussion, e-mail:
[users-unsubscribe_at_subversion.tigris.org].

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2390046

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2393204

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].
Received on 2009-09-10 13:27:15 CEST