-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hey,
- --- Loritsch, Berin wrote: --- > This one client that is failing, are any of the other clients using the > 0.9.8k version of OpenSSL? Only this specific client. Our workstation computers still run with Ubuntu hardy and the old 0.9.8g version of OpenSSL. > It does seem odd that a certificate from an older version of OpenSSL would > stop working with a newer version. That is unless the certificate is > technically invalid and the OpenSSL team fixed that problem. The same client certificate works on all our other workstations that run OpenSSL 0.9.8g on ubuntu hardy. - --- One Thing of note that I forgot in my initial post and that was partially mentioned by Johan: > Can you try some tests without svn, for instance set up apache to > serve a simple static page protected by client cert authentication, > and try to access that with that cert using openssl 0.9.8g vs. 0.9.8k? The access via the dav_svn module in a web browser from the failing client works like a charm. There are no error messages, the SSL handshake works fine. the content of the repository is shown in the browser. This also works from all our regular workstations. So this Problem seems to be subversion specific. I will setup a test server on thursday with a current version of apache, subversion and openssl and test if the failing client still has problems. - -- Bernd May System Administration Technische Universität Berlin An-Institut Deutsche Telekom Laboratories FG Intelligente Netze Sekr. TEL 16 z.Hd. Bernd May Ernst-Reuter-Platz 7 10587 Berlin Mobile: 0160/90257737 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBCAAGBQJMtKFvAAoJENUwDGtuxH+UBDYH/09dvdema0TQQfUIY0wJo3+s CdTvFgJ7ou+ktDAbf7zNIviPRfRUMxgqMFS1VoP5Z6I1akU2+aPf6xJKPa/aBJNZ AZHZNtSGCaOSPiUePWU49FvciUzzOKjw//txM3YJEnfNxS52vXUTNhS5iXq0viC8 59Q2PFvVEeK/JNkP/LQ52P5PFEOeyyL+awtkh4vcaeB/cVoWBTtIiSeuyyPwe/UC k2biYgyU/aKYRsXYVbk2hqpQJXxRqDaGnSmLFHlCSkUCEaQLLefyC62mabxLyCXD Tgi2G9umhSTGpJUcpJKXyM+Csly0kWWG+oOQdduauRAqs0cUSiLl7a1r0ChqTjE= =TtBR -----END PGP SIGNATURE-----