Hi Ivan,

Thanks for your help, I had read that bit of the manual before, but I
couldn't find the 'servers' file to add that option!

I've found it now, and added ...visualsvn/conf/server.pem to the ssl-
auth-files, which appears to have worked, in that the error no longer
says the certificate is not issued by a trusted authority.

However, it still produces an error because the hostnames do not
match. The certificate is for myserver.mydomain.local, but it looks
like svn is trying to validate for localhost, so it still prompts to
accept or reject. How can I correct this?

Error validating server certificate for 'https://localhost:8443':
 - The certificate hostname does not match.
Certificate information:
 - Hostname: de-applserv.darntonelgee.local
 - Valid: from Tue, 06 Jan 2009 17:17:57 GMT until Fri, 04 Jan 2019
17:17:57 GMT
 - Issuer: de-applserv.darntonelgee.local
 - Fingerprint: 75:f5:a4:12:12:84:57:0a:ee:a0:c3:2b:18:70:1d:dc:eb:
8e:ce:f0
(R)eject, accept (t)emporarily or accept (p)ermanently? svn: OPTIONS
of 'https://localhost:8443/svn/iqms/trunk/iqms-dev': Server
certificate verification failed: certificate issued for a different
hostname (https://localhost:8443)

Thanks,
Matt.



On Jan 27, 6:15 pm, Ivan Zhakov <[email protected]> wrote:
> On Tue, Jan 27, 2009 at 8:12 PM,  <[email protected]> wrote:
>
> > Thanks Ivan, that worked.
>
> > Now I can see the problem is that svn update isn't accepting the self
> > signed SSL certificate. I get the following error:
>
> > Error validating server certificate for 'https://localhost:8443':
> >  - The certificate is not issued by a trusted authority. Use the
> >   fingerprint to validate the certificate manually!
> >  - The certificate hostname does not match.
> > Certificate information:
> >  - Hostname: de-applserv.darntonelgee.local
> >  - Valid: from Tue, 06 Jan 2009 17:17:57 GMT until Fri, 04 Jan 2019
> > 17:17:57 GMT
> >  - Issuer: de-applserv.mydomain.local
> >  - Fingerprint: 75:f5:a4:12:12:84:57:0a:ee:a0:c3:2b:18:70:1d:dc:eb:
> > 8e:ce:f0
> > (R)eject, accept (t)emporarily or accept (p)ermanently? svn: OPTIONS
> > of 'https://localhost:8443/svn/iqms/trunk/iqms-dev':Server
> > certificate verification failed: certificate issued for a different
> > hostname, issuer is not trusted (https://localhost:8443)
>
> > How can I tell svn to permanently accept the certificate?
>
> You can use  ssl-authority-files configuration option to trust
> specific certificate. Please find more information in 
> SVNBook:http://svnbook.red-bean.com/en/1.5/svn.serverconfig.httpd.html#svn.se...
>
> --
> Ivan Zhakov
> VisualSVN Team

Reply via email to