[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: SSL Error when trying to connect to svn via https

From: Bernd May <bernd_at_net.t-labs.tu-berlin.de>
Date: Tue, 12 Oct 2010 22:37:06 +0200

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hey,

>> The access via the dav_svn module in a web browser from the
>> failing client works like a charm. There are no error
>> messages, the SSL handshake works fine. the content of the
>> repository is shown in the browser. This also works from all
>> our regular workstations.
>>
>> So this Problem seems to be subversion specific.
>> ...
>>
> That may or may not be true. If the browser you used has it's own SSL
> handling code (happens more than you might expect) then you haven't
> tested the openSSL client libraries yet. To make absolutely sure that
> you are testing the OpenSSL library on your machine, use the command
> line tool:
>
> http://www.openssl.org/docs/apps/s_client.html#
>
> Use any and all options to give you a good understanding of what might
> be going wrong. For example:
>
> -debug
> -showcerts

Ok thanks, did not think about that.
I have tried the commands you suggested and tested the SSL connection.
As far as I can see the connection is setup correctly, all certificates
are in order, not expired, valid, etc, There are no errors, warning
whatsoever so the interaction between client and apache via https seems
to be ok.
When using the svn software though it throws the error mentioned in the
first post.
I have tested it also with a similar setup on a different machine with a
different certificate but the same software versions and it works.

So I guess the problem is this specific client certificate though I
still do not know what specifically.

thanks

- --
Bernd May
System Administration
Technische Universität Berlin
An-Institut Deutsche Telekom Laboratories
FG Intelligente Netze
Sekr. TEL 16
z.Hd. Bernd May
Ernst-Reuter-Platz 7
10587 Berlin

Mobile: 0160/90257737
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBCAAGBQJMtMbwAAoJENUwDGtuxH+UqkgIAJDPTGxVMkOMilaqvRzsOAMh
DRXIDdKmR/wrCFK9UMpK8KWh4CjwPqnlCOfYopqFfa22o9ui0VrQkNE9piWbwkNz
A4dg/HH4Z8XKWCoh8I8fiqBxXM2HEruhP/FrFVzyH01cZlG+fdzgScNfEKMXa2Dv
RnJMUVI/1fHE27E61GU3dQsyt65w3bPxQmFpkVUF/iP2GNPfmYHNQGlpA0BajKvb
FHR1poBYq+4i6ESjE3unnbDwcctFGQOIWH4RyuokI/S8oxKS8zrYkyoitJrxkUu5
5YCR1ydeD5EKJ3gD59uwVKc008lRWRkr1RVY9NNld7MvmxS8aHN340HSwDuLzrA=
=l7pZ
-----END PGP SIGNATURE-----
Received on 2010-10-12 22:37:45 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.