[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Subversion client ssl cert configuration

From: Daniel Shahaf <d.s_at_daniel.shahaf.name>
Date: Thu, 22 Jul 2010 09:07:26 +0300

Bernd May wrote on Wed, Jul 21, 2010 at 15:36:34 +0200:
> What I do want to do now though is to assign specific certificates
> depending on which directory I access on this svn server; i.e
> [groups]
> mygroup = my.server.example.net/svn/myrepo1
> mygroup2 = my.server.example.net/svn/myrepo2
> [mygroup]
> ssl-client-cert-file = /path/to/the/client/cert/mygroup.p12
> [mygroup2]
> ssl-client-cert-file = /path/to/the/client/cert/mygroup2.p12
>
> This does not work so far.
>
> As I understand it, svn simply tries to match the hostname of the server
> against the patterns under [groups] but not the rest of the URI.
>
> Is there a way to change this, or configure svn to match the full URI
> against the pattern?
>

Haven't checked the code, but I wouldn't be surprised if this was hard wired.
(Probably part of the code is in libsvn_ra_{serf,neon} and part in
libsvn_subr.) Could you provide multiple files to the ssl-client-cert-file
setting? Or just concatenate all certs into one big file
(mygroup1-and-mygroup2.p12) and then point to that?

Daniel
(sorry, I don't have time to dive into the source myself right this second.)

> - --
> Bernd
> -----BEGIN PGP SIGNATURE-----
Received on 2010-07-22 08:09:20 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.