Re: using pkcs11 (CAC cards) with svn 1.8 and newer

On Thu, Dec 10, 2015 at 9:34 AM, Simpson, Andrew R CIV NSWC Crane, JXSNL <
andrew.simpson_at_navy.mil> wrote:

> I have been using svn 1.6 and 1.7 with PKCS11 Smart Cards for many years.
> with the removal of NEON from svn 1.8 and newer, I have been unable to use
> svn with pkcs11 certs/cards at all using RHEL 6.X. is there some
> configuration option that I'm missing?

I do not believe Serf has any support for this. Even with Neon on Linux I
believe it required a custom build involving the pakchois library. On
Windows, the pkcs11 support still works for Serf, but that is because it is
provided via OpenSSL compile options that leverage the Windows support for
smart cards. There is nothing similar on Linux.

does anyone know if it even works? It's a huge issue considering that our
> subversion server provider has updated to svn 1.9x and now the older
> clients don't play nice.
>
>
I would like to hear more details on this as it should not be true. Any
SVN client version should work properly with a SVN 1.9 server. You should
still be able to use 1.6 and 1.7 clients without any problems at all. There
were no features added in SVN 1.9 that require a 1.9 client AND server:

http://subversion.apache.org/docs/release-notes/1.9.html#new-feature-compatibility-table

-- 
Thanks
Mark Phippard
http://markphip.blogspot.com/