You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@subversion.apache.org by Hai Zaar <ha...@haizaar.com> on 2008/07/23 12:44:07 UTC
Are multi-domain certificates supported?
I've installed subversion repository under virtual host with SSL
multi-domain certificates (*.example.com), however subversion client
does not seem to support it:
$> svn ls https://svn.example.com
Error validating server certificate for 'https://svn.example.com:443':
- The certificate hostname does not match.
Certificate information:
- Hostname: *.example.com
- Valid: from Wed, 16 Jul 2008 13:34:19 GMT until Thu, 16 Jul 2009 13:34:19 GMT
- Issuer: Example Company
- Fingerprint: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx
(R)eject, accept (t)emporarily or accept (p)ermanently?
P.S. I'm not on the list, so please CC me.
--
Zaar
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Re: Are multi-domain certificates supported?
Posted by Hai Zaar <ha...@haizaar.com>.
On Thu, Jul 24, 2008 at 9:21 PM, Karl Fogel <kf...@red-bean.com> wrote:
> Jens Seidel <je...@users.sf.net> writes:
>> On Wed, Jul 23, 2008 at 03:44:07PM +0300, Hai Zaar wrote:
>>> I've installed subversion repository under virtual host with SSL
>>> multi-domain certificates (*.example.com), however subversion client
>>> does not seem to support it:
>>> $> svn ls https://svn.example.com
>>
>> example.com is a reserved domain which probably doesn't provide svn (why
>> should it?). See e.g. http://en.wikipedia.org/wiki/Example.com
>
> Uh, I suspect Hai Zaar knows that and was just substituting
> "example.com" for his real repository server name :-).
Indeed :)
>
--
Zaar
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Re: Are multi-domain certificates supported?
Posted by Karl Fogel <kf...@red-bean.com>.
Jens Seidel <je...@users.sf.net> writes:
> On Wed, Jul 23, 2008 at 03:44:07PM +0300, Hai Zaar wrote:
>> I've installed subversion repository under virtual host with SSL
>> multi-domain certificates (*.example.com), however subversion client
>> does not seem to support it:
>> $> svn ls https://svn.example.com
>
> example.com is a reserved domain which probably doesn't provide svn (why
> should it?). See e.g. http://en.wikipedia.org/wiki/Example.com
Uh, I suspect Hai Zaar knows that and was just substituting
"example.com" for his real repository server name :-).
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Re: Are multi-domain certificates supported?
Posted by Jens Seidel <je...@users.sourceforge.net>.
On Wed, Jul 23, 2008 at 03:44:07PM +0300, Hai Zaar wrote:
> I've installed subversion repository under virtual host with SSL
> multi-domain certificates (*.example.com), however subversion client
> does not seem to support it:
> $> svn ls https://svn.example.com
example.com is a reserved domain which probably doesn't provide svn (why
should it?). See e.g. http://en.wikipedia.org/wiki/Example.com
> Error validating server certificate for 'https://svn.example.com:443':
> - The certificate hostname does not match.
> Certificate information:
> - Hostname: *.example.com
> - Valid: from Wed, 16 Jul 2008 13:34:19 GMT until Thu, 16 Jul 2009 13:34:19 GMT
> - Issuer: Example Company
> - Fingerprint: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx
> (R)eject, accept (t)emporarily or accept (p)ermanently?
>
> P.S. I'm not on the list, so please CC me.
Please don't forget to add also the header
"Mail-Followup-To: dev@subversion.tigris.org, Hai Zaar <ha...@haizaar.com>"
to simplify replying.
Jens
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Re: Are multi-domain certificates supported?
Posted by Joe Orton <jo...@redhat.com>.
On Wed, Jul 23, 2008 at 03:44:07PM +0300, Hai Zaar wrote:
> I've installed subversion repository under virtual host with SSL
> multi-domain certificates (*.example.com), however subversion client
> does not seem to support it:
> $> svn ls https://svn.example.com
> Error validating server certificate for 'https://svn.example.com:443':
> - The certificate hostname does not match.
> Certificate information:
> - Hostname: *.example.com
> - Valid: from Wed, 16 Jul 2008 13:34:19 GMT until Thu, 16 Jul 2009 13:34:19 GMT
> - Issuer: Example Company
> - Fingerprint: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx
> (R)eject, accept (t)emporarily or accept (p)ermanently?
If you're using ra_neon that should work fine, neon's server identity
comparison algorithm follows RFC 2818. Can you attach/refer to an
example of a real certificate which fails?
Regards, Joe
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org