RE: Update from 1.8.5 to 1.8.8 breaks my self-signed numeric IP certificate

> -----Original Message-----
> From: Daniel Widdis [mailto:widdis_at_gmail.com]
> Sent: zaterdag 1 maart 2014 05:06
> To: users_at_subversion.apache.org
> Subject: Update from 1.8.5 to 1.8.8 breaks my self-signed numeric IP
> certificate
>
> I recently upgraded from 1.8.5 to 1.8.8 via macports. The new version
> refused to permanently accept my self-signed certificate, citing an
> "unknown error".

We fixed a bug in Subversion where we accidentally accepted certificate
issues that were reported after a different first certificate problem.

My guess would be that your selfsigned certificate is not completely valid,
but we accidentally accepted it before because the first report was just
that you weren't a known certificate authority. The second error could then
be something like a problem in the certificate chain.

It could help to upgrade your serf to the latest version as this changes the
handling of a few certificate checks.

If the internal error is X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE (which I
happened to reproduce locally some time ago), upgrading to the latest serf
should resolve this problem for you.

        Bert
Received on 2014-03-03 11:51:06 CET