Re: SVN via https certification chain ignored

Hi again,

> On Sep 16, 2011, at 8:28 PM, Florian wrote:
>
> Why is Mac OS X Lion not capable to checking the certificates
> correctly? To me it seems like it ignores the intermediate
> certificates served from Apache. Or is there something wrong in my
> configuration?

It did some more testing. Once I download the root certificate
AddTrustExternalCARoot from Comodo, and specify this root certificate
explicitly with 'ssl-authority-files' in my .subversion/servers
everything work without any warnings.

This root certificate is however included in the Mac OS X Keychain and
valid, which leads to the conclusion that the command line version of
svn does not check the root CAs in the Keychain at all. Is this
intended behavior?

Thanks
/Florian
Received on 2011-09-16 22:23:22 CEST