You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Michael Klemm <mi...@informatik.uni-erlangen.de> on 2004/05/04 08:59:47 UTC
Subclipse/Win and self signed SSL certificate
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi there!
We finally had success in setting up our Subversion server at our
department. We set up Apache2 to just support access using https.
Therefore, we created a self signed certificate.
Checking out using the shell client svn works perfectly, but Subclipse
refuses to list the repository with
| svn: PROPFIND request failed on '/svn/parmol'
| svn: PROPFIND of '/svn/parmol': Server certificate verification
failed: issuer is not trusted (https:....
At [1] you can see a snapshot of the Eclipse failing to list the
Subversion repository.
Can anyone give me a hint how to solve this problem?
Regards
-michael
[1] http://www2.cs.fau.de/~klemm/subclipse.png
- --
Computer Science Department 2, University of Erlangen-Nuremberg
Martensstrasse 3, D-91058 Erlangen, Germany
phone: ++49 (0)9131 85-28995, fax: ++49 (0)9131 85-28809
web: http://www2.informatik.uni-erlangen.de/~klemm
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2-rc1-SuSE (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFAl1uDWEu1syWqdn0RArFKAKDpomIjqhxa8RwuOq7c6hAowXMXiACePV0Y
h08I6LYFxExKeTbXBLq6R0M=
=5814
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: Subclipse/Win and self signed SSL certificate
Posted by Hermann Voßeler <he...@baaderbank.de>.
> Michael Klemm wrote:
>> Checking out using the shell client svn works perfectly, but
>> Subclipse refuses to list the repository with
>>
>> | svn: PROPFIND request failed on '/svn/parmol'
>> | svn: PROPFIND of
>> '/svn/parmol': Server certificate verification failed: issuer is
>> not trusted (https:....
Ben Collins-Sussman wrote:
> I'm guessing that the subclipse folks haven't fully implemented the
> SSL callback dialogues required by the svn core libraries? Not sure.
> Either way, Subclipse is a separate project. Resend your mail to
> users@subclipse.tigris.org.
We use a somewhat similar setup here, but we encountered no problems
with subclilpse.
We did the following
- create a "in-house-snakeoil-CA"-Certificate (self signed)
- sign the webserver certificate with this CA-cert
- create a certificate for every user
- sign this with the CA-cert as well
- convert this user cert into pkcs12-format (with openssl)
- import this (*.p12) into web browser (for Mozilla) resp. into windows
certificate store (for IE/Win) for repository access via https
- declare it in the runtime configuration area of subversion in the
"servers" file.
After this, the commandline client works without any
password/certificate prompt. tortoise, rapidSVN and subclipse
do the same.
hope this helps
--
Hermann Vosseler
---------------------------------------------------------------
Hermann Voßeler
Baader Wertpapierhandelsbank AG
Weihenstephaner Straße 4
D-85716 Unterschleißheim
eMail: hermann.vosseler@baaderbank.de
Internet: www.baaderbank.de
---------------------------------------------------------------
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: Subclipse/Win and self signed SSL certificate
Posted by Ben Collins-Sussman <su...@collab.net>.
Michael Klemm wrote:
> Checking out using the shell client svn works perfectly, but Subclipse
> refuses to list the repository with
>
> | svn: PROPFIND request failed on '/svn/parmol'
> | svn: PROPFIND of '/svn/parmol': Server certificate verification
> failed: issuer is not trusted (https:....
I'm guessing that the subclipse folks haven't fully implemented the SSL
callback dialogues required by the svn core libraries? Not sure.
Either way, Subclipse is a separate project. Resend your mail to
users@subclipse.tigris.org.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org