Under Linux, using Subversion to try to link to the SVN library set up by VISUALSVN server, the following error may be reported,
Svn:options of ' Https://server.domain.local/svn/repo ': SSL handshake Failed:ssl Error:
Key usage violation in certificate have been detected. (https://server.domain.local)
Google this issue, found this in VISUALSVN's official website has a description, detailed information, please refer to https://www.visualsvn.com/support/topic/00056/.
The reason for this problem is that
Experience the issue if both of the following conditions are met:
- VISUALSVN Server has a self-signed certificate applied and
- Subversion client is built against the GNUTLS library.
VISUALSVN Official website has the following instructions,
GNUTLS Library is a alternative to OpenSSL. Most Subversion clients for Windows is built against OpenSSL and is not affected by this issue. While some Subversion packages (available mostly on linux-based operating systems such as Ubuntu and Debian) is built Aga Inst GnuTLS and is affected.
The way to solve the problem is to
Self-signed certificate please follow the instruction to generate a cerificate without specifying ' Ke Y Usage ' extension:
- ADD the following registry value to the Windows registry:
For 32-bit system:
[Hkey_local_machine\software\visualsvn\visualsvn Server] "creategnutlscompatiblecertificate" =dword:00000001
For 64-bit system:
[Hkey_local_machine\software\wow6432node\visualsvn\visualsvn Server] "creategnutlscompatiblecertificate" =dword:0 0000001
- Start visualsvn Server Manager.
- Go to Action | Properties | Certificate.
- Click Change certificate ... and follow the wizard instructions to generate a new self-signed certificate.
The certificate would be generated without the ' Key Usage ' extension and would be compatible both with GnuTLS and OpenSSL.
The problem of processing Linux under Subversion attempt to connect to the self-built VISUALSVN server "Key usage violation in certificate have been detected" error