You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@subversion.apache.org by "Martin v. Löwis" <ma...@v.loewis.de> on 2003/03/31 22:05:54 UTC
SSL authentication
Is it possible to setup Subversion to use client TLS authentication,
through mod_ssl?
I.e. the client would not provide a password, but a certificate, which
the server verifies to be signed properly, and then uses to validate
permissions, and identify authorship of changes.
Regards,
Martin
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Re: SSL authentication
Posted by Ben Collins-Sussman <su...@collab.net>.
Jeff Stuart <js...@computer-city.net> writes:
> Ben Collins-Sussman wrote:
> > martin@v.loewis.de (Martin v. Löwis) writes:
> >
> >> Is it possible to setup Subversion to use client TLS authentication,
> >> through mod_ssl?
> >>
> >> I.e. the client would not provide a password, but a certificate, which
> >> the server verifies to be signed properly, and then uses to validate
> >> permissions, and identify authorship of changes.
> >
> > Yes. Client and server certificates are now supported by the svn
> > client, if you check out the latest svn code. (And of course you need
> > to set up Apache to issue client-cert challenges too.)
>
> Is there any docs on how to set this up?
Not yet documented in the book. But if you build and install HEAD,
then remove (or move) ~/.subversion elsewhere, then run 'svn', it will
create a new ~/.subversion area. Look at the ~/.subversion/servers
file. You'll see a bunch of new options commented out related to
client and server certs.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Re: SSL authentication
Posted by Jeff Stuart <js...@computer-city.net>.
Ben Collins-Sussman wrote:
> martin@v.loewis.de (Martin v. Löwis) writes:
>
>> Is it possible to setup Subversion to use client TLS authentication,
>> through mod_ssl?
>>
>> I.e. the client would not provide a password, but a certificate, which
>> the server verifies to be signed properly, and then uses to validate
>> permissions, and identify authorship of changes.
>
> Yes. Client and server certificates are now supported by the svn
> client, if you check out the latest svn code. (And of course you need
> to set up Apache to issue client-cert challenges too.)
Is there any docs on how to set this up?
--
Jeff Stuart
jstuart@computer-city.net
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Re: SSL authentication
Posted by Ben Collins-Sussman <su...@collab.net>.
martin@v.loewis.de (Martin v. Löwis) writes:
> Is it possible to setup Subversion to use client TLS authentication,
> through mod_ssl?
>
> I.e. the client would not provide a password, but a certificate, which
> the server verifies to be signed properly, and then uses to validate
> permissions, and identify authorship of changes.
Yes. Client and server certificates are now supported by the svn
client, if you check out the latest svn code. (And of course you need
to set up Apache to issue client-cert challenges too.)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org