Use of client certificate data (DN) for subversion's author field?

[Soeren Gerlach <so...@all-about-shift.com>]

Hi,

I've just "upgraded" my apache https-based repository to a fully
functional client certificate enabled repository ,-))
Before the switch I used basic authentication, i.e. user/password based.
The user - as identified by apache - has been put into the "author"
field from Subversion which was quite fine. But with the certificate the
author fields is empty. Is there any way e.g. to fill the DN field from
the certificate into the author field?
I found one mail thread on this list, nearly a year old, but no solution
has been provided?


Thanks a lot,
Soeren Gerlach
 


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: Use of client certificate data (DN) for subversion's author field?

[Kevin Bentley <ke...@gmail.com>]

On Thu, 14 Oct 2004 22:12:10 +0200, Soeren Gerlach
<so...@all-about-shift.com> wrote:
> Hi,
> 
> I've just "upgraded" my apache https-based repository to a fully
> functional client certificate enabled repository ,-))
> Before the switch I used basic authentication, i.e. user/password based.
> The user - as identified by apache - has been put into the "author"
> field from Subversion which was quite fine. But with the certificate the
> author fields is empty. Is there any way e.g. to fill the DN field from
> the certificate into the author field?
> I found one mail thread on this list, nearly a year old, but no solution
> has been provided?

You can use FakeBasicAuth, which will give you very ugly names (the
full subject of the certificate). I suggested a nice simple fix to the
svn and mod_ssl developers, but they don't seem to see the need for
having a username map to a certificate (I say this based on their
response, which was basically 'who cares').

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org