Re: disable security hole in svn+ssh?
From: Ryan Schmidt <subversion-2011a_at_ryandesign.com>
Date: Thu, 28 Jul 2011 23:53:38 -0500
On Jul 28, 2011, at 23:44, Ryan Schmidt wrote:
If the question was how to redirect someone from svn to svn+ssh, then that's not possible, but again, the solution if you want users to only use encrypted access would be to not start an svnserve instance on the server, thus preventing anyone from using svn protocol.
> More directly, the answer to your question of how to prevent someone from circumventing https and accessing the server via http, is to simply configure the server to not serve the repository on http at all. Put all your Subversion-related Apache configuration directives inside an https virtual host only.
Of course that port number should have been 443.
This is an archived mail posted to the Subversion Users mailing list.