[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: SSL Error when trying to connect to svn via https

From: Loritsch, Berin <bloritsch_at_dtri.net>
Date: Tue, 12 Oct 2010 14:16:36 -0400

>
> One Thing of note that I forgot in my initial post and that
> was partially mentioned by Johan:
> > Can you try some tests without svn, for instance set up apache to
> > serve a simple static page protected by client cert authentication,
> > and try to access that with that cert using openssl 0.9.8g
> vs. 0.9.8k?
>
> The access via the dav_svn module in a web browser from the
> failing client works like a charm. There are no error
> messages, the SSL handshake works fine. the content of the
> repository is shown in the browser. This also works from all
> our regular workstations.
>
> So this Problem seems to be subversion specific.
>
>
> I will setup a test server on thursday with a current version
> of apache, subversion and openssl and test if the failing
> client still has problems.

That may or may not be true. If the browser you used has it's own SSL
handling code (happens more than you might expect) then you haven't
tested the openSSL client libraries yet. To make absolutely sure that
you are testing the OpenSSL library on your machine, use the command
line tool:

http://www.openssl.org/docs/apps/s_client.html#

Use any and all options to give you a good understanding of what might
be going wrong. For example:

-debug
-showcerts

Sorry, it took a while to find the docs for it. I recommend routing the
debug information to a file so you can review it later.

Confidentiality Note: The information contained in this message, and any attachments, may contain proprietary and/or privileged material. It is intended solely for the person or entity to which it is addressed. Any review, retransmission, dissemination, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.
Received on 2010-10-12 20:17:14 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.