You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@subversion.apache.org by Sander Striker <st...@apache.org> on 2001/09/05 23:18:58 UTC

svn and ssl

Hi,

Can someone that admins the svn.collab.net box
setup ssl there for the svn repos location?
That way, ssl enabled builds can be tested aswell.

No rush.


Sander

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org

Re: svn and ssl

Posted by Greg Stein <gs...@lyra.org>.
On Thu, Sep 06, 2001 at 11:05:26AM +0200, Sander Striker wrote:
> > From: Greg Stein [mailto:gstein@lyra.org]
> > On Thu, Sep 06, 2001 at 01:18:58AM +0200, Sander Striker wrote:
> >> Hi,
> >>
> >> Can someone that admins the svn.collab.net box
> >> setup ssl there for the svn repos location?
> >> That way, ssl enabled builds can be tested aswell.
> >>
> >> No rush.
> >
> > Nope. Too complicated. Set up and test SSL on your own box :-)
> 
> Ok.  No prob.  About being complicated: it only takes about
> 30mins to setup.

The *setup* isn't necessarily complicated, but the resulting system is
definitely more complex. Gotta have some certs, gotta have some pubkeys from
each client, blah blah. Maybe it is easy, maybe not, but if it isn't needed,
then it is "too much" :-)

And recall: we're talking about Apache 2.0 and its mod_ssl here. Not the
most stable hunks of code. I'd rather not fight with it when we don't have
to.

> I'll try and setup a svn repos locally to
> test with ssl (which is already up and running).  I'll post
> a mini HOWTO later, when I've got it working.

That would be great.

> > svn.collab.net is not for testing. It is the primary repository for
> > Subversion. We don't need SSL at this time, so we aren't going to
> > install it.
> 
> Err, from http://svn.collab.net/setup.html:
> 
> "/testing/current is used during some of the initial testing."
> "/testing/greg is a repository Greg set up for some initial testing."
> 
> *grin*
> Or does the word 'initial' suggest they aren't anymore and went away?

Initial is exactly that. Before it became the official repos, we were
running quite a few tests on there. Haven't since. Those URLs might have
even got blown away during a refresh that we did.

Cheers,
-g

-- 
Greg Stein, http://www.lyra.org/

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org

RE: svn and ssl

Posted by Sander Striker <st...@apache.org>.
> From: Ben Collins-Sussman [mailto:sussman@collab.net]
> "Sander Striker" <st...@apache.org> writes:
>  
> > Ok.  No prob.  About being complicated: it only takes about
> > 30mins to setup.  I'll try and setup a svn repos locally to
> > test with ssl (which is already up and running).  I'll post
> > a mini HOWTO later, when I've got it working.
> 
> Can you add your info to our existing server-setup-howto?  It's
> notes/dav_setup.txt.   Maybe post as a patch.

Will do.  Probably gonna be this weekend.  I'm kind of swamped
right now ;)

Sander


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org

Re: svn and ssl

Posted by Ben Collins-Sussman <su...@collab.net>.
"Sander Striker" <st...@apache.org> writes:
 
> Ok.  No prob.  About being complicated: it only takes about
> 30mins to setup.  I'll try and setup a svn repos locally to
> test with ssl (which is already up and running).  I'll post
> a mini HOWTO later, when I've got it working.

Can you add your info to our existing server-setup-howto?  It's
notes/dav_setup.txt.   Maybe post as a patch.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org

RE: svn and ssl

Posted by Sander Striker <st...@apache.org>.
> From: Greg Stein [mailto:gstein@lyra.org]
> On Thu, Sep 06, 2001 at 01:18:58AM +0200, Sander Striker wrote:
>> Hi,
>>
>> Can someone that admins the svn.collab.net box
>> setup ssl there for the svn repos location?
>> That way, ssl enabled builds can be tested aswell.
>>
>> No rush.
>
> Nope. Too complicated. Set up and test SSL on your own box :-)

Ok.  No prob.  About being complicated: it only takes about
30mins to setup.  I'll try and setup a svn repos locally to
test with ssl (which is already up and running).  I'll post
a mini HOWTO later, when I've got it working.

> svn.collab.net is not for testing. It is the primary repository for
> Subversion. We don't need SSL at this time, so we aren't going to
> install it.

Err, from http://svn.collab.net/setup.html:

"/testing/current is used during some of the initial testing."
"/testing/greg is a repository Greg set up for some initial testing."

*grin*
Or does the word 'initial' suggest they aren't anymore and went away?

> "But for security, you should do it. You don't want somebody committing
> changes if they don't have a high-security client-side certificate." Oh
no!

This was not what I was thinking :)

> Somebody created a new revision! Roll it back. We have version
> control. :-)

Yes.

> Cheers,
> -g

Sander


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org

Re: svn and ssl

Posted by Greg Stein <gs...@lyra.org>.
On Thu, Sep 06, 2001 at 01:18:58AM +0200, Sander Striker wrote:
> Hi,
> 
> Can someone that admins the svn.collab.net box
> setup ssl there for the svn repos location?
> That way, ssl enabled builds can be tested aswell.
> 
> No rush.

Nope. Too complicated. Set up and test SSL on your own box :-)

svn.collab.net is not for testing. It is the primary repository for
Subversion. We don't need SSL at this time, so we aren't going to install
it.

"But for security, you should do it. You don't want somebody committing
changes if they don't have a high-security client-side certificate." Oh no!
Somebody created a new revision! Roll it back. We have version control. :-)

Cheers,
-g

-- 
Greg Stein, http://www.lyra.org/

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org