You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by ion <ga...@gmail.com> on 2007/10/04 20:30:44 UTC
How to set up subversion, apache, and SSL
I've been wracking my head with this for weeks, and no amount of googling
helped me.
Has anyone here set up subversion, with a mostly standard apache2
installation doing SSL encryption?
I have subversion 1.4.5, apache 2.2.4 and openssl 0.9.8e installed, but I
cannot figure out how to make them work together. I could be retarded.
apache is installed in /usr/local/apache2, a very standard build from
source, with mod_dav_svn and mod_authz_svn loading at startup.
subversion and apache work together, I access my repositories through
http://server/svn/repo. But I need it to run with https.
Surely someone here has a similar set up and was successful configuring SSL
to work with subversion, to the point of being able to relay how it was
done. Please help me here.
many thanks in advance.....
Re: How to set up subversion, apache, and SSL
Posted by ion <ga...@gmail.com>.
Sincere thanks to all who responded. Your responses made me think past my
retardation about the whole thing, and I got it to work finally.
best regards,
On 10/9/07, Erik Huelsmann <eh...@gmail.com> wrote:
>
> On 10/9/07, Boris Yazlovitsky <bo...@gmail.com> wrote:
> >
> > there is also nothing pertaining to this in the apache error logs on the
> > server side. Also I cannot telnet to the server on port 443. Does that
> > mean apache is not listening on that port?
>
> That, or that there's a network, firewall, router or proxy
> configuration problem between you and the server.
>
> > thanks for all the responses....
> HTH,
>
> Erik.
>
Re: How to set up subversion, apache, and SSL
Posted by Erik Huelsmann <eh...@gmail.com>.
On 10/9/07, Boris Yazlovitsky <bo...@gmail.com> wrote:
>
> there is also nothing pertaining to this in the apache error logs on the
> server side. Also I cannot telnet to the server on port 443. Does that
> mean apache is not listening on that port?
That, or that there's a network, firewall, router or proxy
configuration problem between you and the server.
> thanks for all the responses....
HTH,
Erik.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: How to set up subversion, apache, and SSL
Posted by Boris Yazlovitsky <bo...@gmail.com>.
there is also nothing pertaining to this in the apache error logs on the
server side. Also I cannot telnet to the server on port 443. Does that
mean apache is not listening on that port?
thanks for all the responses....
On 10/9/07, Ryan Schmidt <su...@ryandesign.com> wrote:
>
> He asked for https access, not unencrypted svnserve access...
>
> On Oct 9, 2007, at 01:11, ratnavel ps wrote:
>
> > Its pretty simple
> >
> > Open your dos prompt or the terminal window(In which system the
> > Subversion repository is) Type "svnserve -d -r repopath"
> >
> > You'll be able to connect.
> >
> > Regards,
> > ratnavel
> >
> > On 10/9/07, ion <ga...@gmail.com> wrote:
> > thank you very much for all of your help.
> >
> > I configured apache httpd.conf with your example as a guide and it
> > started correctly, I think...
> > does svn on the server side have to be configured with the ability
> > to handle the https scheme?
> > my client is able to handle the https scheme, but when I try to
> > access the repo, I get the following:
> >
> > svn: PROPFIND request failed on '/svn/repo1'
> > svn: PROPFIND of '/svn/repo1': could not connect to server
> > ( https://server)
> >
> > any help or pointers will be appreciated
> >
> > On 10/4/07, Toby Thain < toby@smartgames.ca> wrote:
> > On 4-Oct-07, at 5:30 PM, ion wrote:
> >
> > >
> > > I've been wracking my head with this for weeks, and no amount of
> > > googling helped me.
> > >
> > > Has anyone here set up subversion, with a mostly standard apache2
> > > installation doing SSL encryption?
> > >
> > > I have subversion 1.4.5, apache 2.2.4 and openssl 0.9.8e installed,
> > > but I cannot figure out how to make them work together. I could be
> > > retarded.
> > >
> > > apache is installed in /usr/local/apache2, a very standard build
> > > from source, with mod_dav_svn and mod_authz_svn loading at startup.
> > >
> > > subversion and apache work together, I access my repositories
> > > through http://server/svn/repo . But I need it to run with https.
> > >
> > > Surely someone here has a similar set up and was successful
> > > configuring SSL to work with subversion, to the point of being able
> > > to relay how it was done.
> >
> > Have done this many times, on Linux and Solaris. The Svn Apache
> > modules don't care whether you're using SSL or not. The following is
> > extracted from my Apache config on Gentoo Linux. It assumes you have
> > built and installed the Apache modules for Subversion. Good
> > instructions for doing this are part of the Subversion source
> > distribution.
> >
> > # these are actually buried in /etc/apache2/modules.d/
> > 47_mod_dav_svn.conf
> > LoadModule dav_svn_module modules/mod_dav_svn.so
> > LoadModule authz_svn_module modules/mod_authz_svn.so
> >
> > <VirtualHost *:443>
> > ServerName DOMAIN.com
> > ErrorLog /var/www/logs/error-ssl.log
> > CustomLog /var/www/logs/access-ssl.log combined
> >
> > SSLEngine on
> > SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:
> > +SSLv2:+EXP:+eNULL
> > SSLCertificateFile conf/ssl/server.crt
> > SSLCertificateKeyFile conf/ssl/server.key
> >
> > <Location /svn>
> > DAV svn
> > SVNParentPath /var/svn # individual repos under here
> > # AuthzSVNAccessFile /var/svn/policy # if you wish
> >
> > Order allow,deny
> > Allow from all
> >
> > # example authentication setup
> > Require valid-user
> > AuthType Basic
> > AuthName "Subversion repository"
> > AuthUserFile /var/svn/htpasswd
> > Satisfy Any
> > </Location>
> > </VirtualHost>
> >
> > The trickiest part is creating the SSL cert and key (server.crt,
> > server.key ). I set up my own certifying authority (CA) according to
> > this recipe:
> > http://www.debian-administration.org/articles/284
>
>
--
http://www.myspace.com/acrylickalchemical
Re: How to set up subversion, apache, and SSL
Posted by Ryan Schmidt <su...@ryandesign.com>.
He asked for https access, not unencrypted svnserve access...
On Oct 9, 2007, at 01:11, ratnavel ps wrote:
> Its pretty simple
>
> Open your dos prompt or the terminal window(In which system the
> Subversion repository is) Type "svnserve -d -r repopath"
>
> You'll be able to connect.
>
> Regards,
> ratnavel
>
> On 10/9/07, ion <ga...@gmail.com> wrote:
> thank you very much for all of your help.
>
> I configured apache httpd.conf with your example as a guide and it
> started correctly, I think...
> does svn on the server side have to be configured with the ability
> to handle the https scheme?
> my client is able to handle the https scheme, but when I try to
> access the repo, I get the following:
>
> svn: PROPFIND request failed on '/svn/repo1'
> svn: PROPFIND of '/svn/repo1': could not connect to server
> ( https://server)
>
> any help or pointers will be appreciated
>
> On 10/4/07, Toby Thain < toby@smartgames.ca> wrote:
> On 4-Oct-07, at 5:30 PM, ion wrote:
>
> >
> > I've been wracking my head with this for weeks, and no amount of
> > googling helped me.
> >
> > Has anyone here set up subversion, with a mostly standard apache2
> > installation doing SSL encryption?
> >
> > I have subversion 1.4.5, apache 2.2.4 and openssl 0.9.8e installed,
> > but I cannot figure out how to make them work together. I could be
> > retarded.
> >
> > apache is installed in /usr/local/apache2, a very standard build
> > from source, with mod_dav_svn and mod_authz_svn loading at startup.
> >
> > subversion and apache work together, I access my repositories
> > through http://server/svn/repo . But I need it to run with https.
> >
> > Surely someone here has a similar set up and was successful
> > configuring SSL to work with subversion, to the point of being able
> > to relay how it was done.
>
> Have done this many times, on Linux and Solaris. The Svn Apache
> modules don't care whether you're using SSL or not. The following is
> extracted from my Apache config on Gentoo Linux. It assumes you have
> built and installed the Apache modules for Subversion. Good
> instructions for doing this are part of the Subversion source
> distribution.
>
> # these are actually buried in /etc/apache2/modules.d/
> 47_mod_dav_svn.conf
> LoadModule dav_svn_module modules/mod_dav_svn.so
> LoadModule authz_svn_module modules/mod_authz_svn.so
>
> <VirtualHost *:443>
> ServerName DOMAIN.com
> ErrorLog /var/www/logs/error-ssl.log
> CustomLog /var/www/logs/access-ssl.log combined
>
> SSLEngine on
> SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:
> +SSLv2:+EXP:+eNULL
> SSLCertificateFile conf/ssl/server.crt
> SSLCertificateKeyFile conf/ssl/server.key
>
> <Location /svn>
> DAV svn
> SVNParentPath /var/svn # individual repos under here
> # AuthzSVNAccessFile /var/svn/policy # if you wish
>
> Order allow,deny
> Allow from all
>
> # example authentication setup
> Require valid-user
> AuthType Basic
> AuthName "Subversion repository"
> AuthUserFile /var/svn/htpasswd
> Satisfy Any
> </Location>
> </VirtualHost>
>
> The trickiest part is creating the SSL cert and key (server.crt,
> server.key ). I set up my own certifying authority (CA) according to
> this recipe:
> http://www.debian-administration.org/articles/284
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: How to set up subversion, apache, and SSL
Posted by ratnavel ps <ra...@gmail.com>.
Its pretty simple
Open your dos prompt or the terminal window(In which system the Subversion
repository is) Type "svnserve -d -r repopath"
You'll be able to connect.
Regards,
ratnavel
On 10/9/07, ion <ga...@gmail.com> wrote:
>
>
> thank you very much for all of your help.
>
> I configured apache httpd.conf with your example as a guide and it started
> correctly, I think...
> does svn on the server side have to be configured with the ability to
> handle the https scheme?
> my client is able to handle the https scheme, but when I try to access the
> repo, I get the following:
>
> svn: PROPFIND request failed on '/svn/repo1'
> svn: PROPFIND of '/svn/repo1': could not connect to server (
> https://server)
>
> any help or pointers will be appreciated
>
> On 10/4/07, Toby Thain < toby@smartgames.ca> wrote:
> >
> >
> > On 4-Oct-07, at 5:30 PM, ion wrote:
> >
> > >
> > > I've been wracking my head with this for weeks, and no amount of
> > > googling helped me.
> > >
> > > Has anyone here set up subversion, with a mostly standard apache2
> > > installation doing SSL encryption?
> > >
> > > I have subversion 1.4.5, apache 2.2.4 and openssl 0.9.8e installed,
> > > but I cannot figure out how to make them work together. I could be
> > > retarded.
> > >
> > > apache is installed in /usr/local/apache2, a very standard build
> > > from source, with mod_dav_svn and mod_authz_svn loading at startup.
> > >
> > > subversion and apache work together, I access my repositories
> > > through http://server/svn/repo . But I need it to run with https.
> > >
> > > Surely someone here has a similar set up and was successful
> > > configuring SSL to work with subversion, to the point of being able
> > > to relay how it was done.
> >
> > Have done this many times, on Linux and Solaris. The Svn Apache
> > modules don't care whether you're using SSL or not. The following is
> > extracted from my Apache config on Gentoo Linux. It assumes you have
> > built and installed the Apache modules for Subversion. Good
> > instructions for doing this are part of the Subversion source
> > distribution.
> >
> > # these are actually buried in /etc/apache2/modules.d/
> > 47_mod_dav_svn.conf
> > LoadModule dav_svn_module modules/mod_dav_svn.so
> > LoadModule authz_svn_module modules/mod_authz_svn.so
> >
> > <VirtualHost *:443>
> > ServerName DOMAIN.com
> > ErrorLog /var/www/logs/error-ssl.log
> > CustomLog /var/www/logs/access-ssl.log combined
> >
> > SSLEngine on
> > SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:
> > +SSLv2:+EXP:+eNULL
> > SSLCertificateFile conf/ssl/server.crt
> > SSLCertificateKeyFile conf/ssl/server.key
> >
> > <Location /svn>
> > DAV svn
> > SVNParentPath /var/svn # individual repos under here
> > # AuthzSVNAccessFile /var/svn/policy # if you wish
> >
> > Order allow,deny
> > Allow from all
> >
> > # example authentication setup
> > Require valid-user
> > AuthType Basic
> > AuthName "Subversion repository"
> > AuthUserFile /var/svn/htpasswd
> > Satisfy Any
> > </Location>
> > </VirtualHost>
> >
> > The trickiest part is creating the SSL cert and key (server.crt,
> > server.key ). I set up my own certifying authority (CA) according to
> > this recipe:
> > http://www.debian-administration.org/articles/284
> >
> > HTH
> > --Toby
> >
> >
> > > Please help me here.
> > >
> > >
> > > many thanks in advance.....
> > >
> >
> >
>
Re: How to set up subversion, apache, and SSL
Posted by ion <ga...@gmail.com>.
thank you very much for all of your help.
I configured apache httpd.conf with your example as a guide and it started
correctly, I think...
does svn on the server side have to be configured with the ability to handle
the https scheme?
my client is able to handle the https scheme, but when I try to access the
repo, I get the following:
svn: PROPFIND request failed on '/svn/repo1'
svn: PROPFIND of '/svn/repo1': could not connect to server (https://server)
any help or pointers will be appreciated
On 10/4/07, Toby Thain <to...@smartgames.ca> wrote:
>
>
> On 4-Oct-07, at 5:30 PM, ion wrote:
>
> >
> > I've been wracking my head with this for weeks, and no amount of
> > googling helped me.
> >
> > Has anyone here set up subversion, with a mostly standard apache2
> > installation doing SSL encryption?
> >
> > I have subversion 1.4.5, apache 2.2.4 and openssl 0.9.8e installed,
> > but I cannot figure out how to make them work together. I could be
> > retarded.
> >
> > apache is installed in /usr/local/apache2, a very standard build
> > from source, with mod_dav_svn and mod_authz_svn loading at startup.
> >
> > subversion and apache work together, I access my repositories
> > through http://server/svn/repo. But I need it to run with https.
> >
> > Surely someone here has a similar set up and was successful
> > configuring SSL to work with subversion, to the point of being able
> > to relay how it was done.
>
> Have done this many times, on Linux and Solaris. The Svn Apache
> modules don't care whether you're using SSL or not. The following is
> extracted from my Apache config on Gentoo Linux. It assumes you have
> built and installed the Apache modules for Subversion. Good
> instructions for doing this are part of the Subversion source
> distribution.
>
> # these are actually buried in /etc/apache2/modules.d/
> 47_mod_dav_svn.conf
> LoadModule dav_svn_module modules/mod_dav_svn.so
> LoadModule authz_svn_module modules/mod_authz_svn.so
>
> <VirtualHost *:443>
> ServerName DOMAIN.com
> ErrorLog /var/www/logs/error-ssl.log
> CustomLog /var/www/logs/access-ssl.log combined
>
> SSLEngine on
> SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:
> +SSLv2:+EXP:+eNULL
> SSLCertificateFile conf/ssl/server.crt
> SSLCertificateKeyFile conf/ssl/server.key
>
> <Location /svn>
> DAV svn
> SVNParentPath /var/svn # individual repos under here
> # AuthzSVNAccessFile /var/svn/policy # if you wish
>
> Order allow,deny
> Allow from all
>
> # example authentication setup
> Require valid-user
> AuthType Basic
> AuthName "Subversion repository"
> AuthUserFile /var/svn/htpasswd
> Satisfy Any
> </Location>
> </VirtualHost>
>
> The trickiest part is creating the SSL cert and key (server.crt,
> server.key). I set up my own certifying authority (CA) according to
> this recipe:
> http://www.debian-administration.org/articles/284
>
> HTH
> --Toby
>
>
> > Please help me here.
> >
> >
> > many thanks in advance.....
> >
>
>
Re: How to set up subversion, apache, and SSL
Posted by Toby Thain <to...@smartgames.ca>.
On 4-Oct-07, at 5:30 PM, ion wrote:
>
> I've been wracking my head with this for weeks, and no amount of
> googling helped me.
>
> Has anyone here set up subversion, with a mostly standard apache2
> installation doing SSL encryption?
>
> I have subversion 1.4.5, apache 2.2.4 and openssl 0.9.8e installed,
> but I cannot figure out how to make them work together. I could be
> retarded.
>
> apache is installed in /usr/local/apache2, a very standard build
> from source, with mod_dav_svn and mod_authz_svn loading at startup.
>
> subversion and apache work together, I access my repositories
> through http://server/svn/repo. But I need it to run with https.
>
> Surely someone here has a similar set up and was successful
> configuring SSL to work with subversion, to the point of being able
> to relay how it was done.
Have done this many times, on Linux and Solaris. The Svn Apache
modules don't care whether you're using SSL or not. The following is
extracted from my Apache config on Gentoo Linux. It assumes you have
built and installed the Apache modules for Subversion. Good
instructions for doing this are part of the Subversion source
distribution.
# these are actually buried in /etc/apache2/modules.d/
47_mod_dav_svn.conf
LoadModule dav_svn_module modules/mod_dav_svn.so
LoadModule authz_svn_module modules/mod_authz_svn.so
<VirtualHost *:443>
ServerName DOMAIN.com
ErrorLog /var/www/logs/error-ssl.log
CustomLog /var/www/logs/access-ssl.log combined
SSLEngine on
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:
+SSLv2:+EXP:+eNULL
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key
<Location /svn>
DAV svn
SVNParentPath /var/svn # individual repos under here
# AuthzSVNAccessFile /var/svn/policy # if you wish
Order allow,deny
Allow from all
# example authentication setup
Require valid-user
AuthType Basic
AuthName "Subversion repository"
AuthUserFile /var/svn/htpasswd
Satisfy Any
</Location>
</VirtualHost>
The trickiest part is creating the SSL cert and key (server.crt,
server.key). I set up my own certifying authority (CA) according to
this recipe:
http://www.debian-administration.org/articles/284
HTH
--Toby
> Please help me here.
>
>
> many thanks in advance.....
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: How to set up subversion, apache, and SSL
Posted by Chris 'Xenon' Hanson <xe...@3dnature.com>.
ion wrote:
> I've been wracking my head with this for weeks, and no amount of
> googling helped me.
> Has anyone here set up subversion, with a mostly standard apache2
> installation doing SSL encryption?
> I have subversion 1.4.5, apache 2.2.4 and openssl 0.9.8e installed, but
> I cannot figure out how to make them work together. I could be retarded.
> apache is installed in /usr/local/apache2, a very standard build from
> source, with mod_dav_svn and mod_authz_svn loading at startup.
> subversion and apache work together, I access my repositories through
> http://server/svn/repo. But I need it to run with https.
> Surely someone here has a similar set up and was successful configuring
> SSL to work with subversion, to the point of being able to relay how it
> was done. Please help me here.
I followed a pretty basic recipe for Ubuntu setup:
http://ubuntuforums.org/showthread.php?t=51753
Of course, I'm having problems with my repository, but I doubt they are related to SSL.
> many thanks in advance.....
--
Chris 'Xenon' Hanson | Xenon @ 3D Nature | http://www.3DNature.com/
"I set the wheels in motion, turn up all the machines, activate the programs,
and run behind the scenes. I set the clouds in motion, turn up light and sound,
activate the window, and watch the world go 'round." -Prime Mover, Rush.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: How to set up subversion, apache, and SSL
Posted by Ryan Schmidt <su...@ryandesign.com>.
On Oct 4, 2007, at 23:06, ratnavel ps wrote:
> On 10/5/07, ion wrote:
>
>> I've been wracking my head with this for weeks, and no amount of
>> googling helped me.
>>
>> Has anyone here set up subversion, with a mostly standard apache2
>> installation doing SSL encryption?
>>
>> I have subversion 1.4.5, apache 2.2.4 and openssl 0.9.8e
>> installed, but I cannot figure out how to make them work
>> together. I could be retarded.
>>
>> apache is installed in /usr/local/apache2, a very standard build
>> from source, with mod_dav_svn and mod_authz_svn loading at startup.
>>
>> subversion and apache work together, I access my repositories
>> through http://server/svn/repo. But I need it to run with https.
>>
>> Surely someone here has a similar set up and was successful
>> configuring SSL to work with subversion, to the point of being
>> able to relay how it was done. Please help me here.
>
> Check this attachment it'll be more useful.
>
> <Svn with apache.doc>
Better to put such documents on your web space and send a link to it
so those who are interested can get to it, and those who aren't don't
need to spend time downloading it. Also better to use PDF or
something everyone can easily open, instead of something proprietary
like a Word document.
> Also I think apache 2.2.4 is not compatible for that better try
> with apache 2.0.xx U can have it.
Subversion works great with Apache 2.0.x or 2.2.x. You just need to
make sure you compile Subversion using the same version of APR as
your version of Apache uses. Or use Subversion binaries designed for
your version of Apache. Anyway the OP already said Subversion and
Apache 2.2 were working fine together.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: How to set up subversion, apache, and SSL
Posted by ratnavel ps <ra...@gmail.com>.
Check this attachment it'll be more useful.
Also I think apache 2.2.4 is not compatible for that better try with apache
2.0.xx U can have it.
Regards,
Ratnavel.
On 10/5/07, ion <ga...@gmail.com> wrote:
>
>
> I've been wracking my head with this for weeks, and no amount of googling
> helped me.
>
> Has anyone here set up subversion, with a mostly standard apache2
> installation doing SSL encryption?
>
> I have subversion 1.4.5, apache 2.2.4 and openssl 0.9.8e installed, but I
> cannot figure out how to make them work together. I could be retarded.
>
> apache is installed in /usr/local/apache2, a very standard build from
> source, with mod_dav_svn and mod_authz_svn loading at startup.
>
> subversion and apache work together, I access my repositories through
> http://server/svn/repo. But I need it to run with https.
>
> Surely someone here has a similar set up and was successful configuring
> SSL to work with subversion, to the point of being able to relay how it was
> done. Please help me here.
>
>
> many thanks in advance.....
>
>