Re: svn on OSX 10.7.3 can't find CA certificates

On Mon, Mar 12, 2012 at 2:00 PM, Zachary Burnham <zburnham_at_efi.org> wrote:
> I'd have thought that providing relevant information would have been helpful
> .
>
> Nevertheless, I'm still having trouble with this.  I've exported the
> relevant CA certificate and edited ~ /.subversion/servers to look for it.  I
> know that it's finding it, because when I deliberately misspell the file
> name, it gives me a different error (svn: Invalid config: unable to load
> certificate file '/<home>/.subversion/geotruste.pem') than I have been
> seeing previously (SSL certificate checks failed: Server certificate
> verification failed: issuer is not trusted).  Is there something else I can
> try?

Random suggestion: does the server provide the entire certificate
chain to the client?
In Apache: see the SSLCertificateChainFile directive [1].

Other than that, try to narrow it down:
- Does this only happen with OSX 10.7.3? Can you try with other
platforms? Did it occur with a previous version of OSX?
- The failing svn client: is it built against another openssl version
than svn clients which do succeed?

[1] http://httpd.apache.org/docs/2.0/mod/mod_ssl.html#sslcertificatechainfile

-- 
Johan