linux上svn串連visual svn server時ssl鑒權失敗，問題解決(轉)

標籤：

 

情境：1、在windows 7上安裝了visual svn server作為自己的svn伺服器。

    2、在虛擬機器centos 6.3上使用svn用戶端check代碼，報錯：

 

[plain] view plaincopyprint? 

1. #svn checkout https://192.168.0.104:8443/svn/DblList  
2. svn: OPTIONS of ‘https://192.168.0.104:8443/svn/DblList‘: SSL handshake failed: SSL error: Key usage violation in certificate has been detected. (https://192.168.0.104:8443)  

 

 

解決：在網上找到一篇文章，按照它介紹的方法操作，解決問題。明白了，這是因為virtual svn在產生鑒權資料的時候使用了一個外掛程式，而這個外掛程式是OpenSSL支援的，但GnuTls是不支援的。詳細的內容大家仔細看吧。感謝這篇文章的原作者，及散播者。

 

Symptoms

 

Subversion clients receive the following error message when attempting to connect to VisualSVN Server:

svn: OPTIONS of ‘https://server.domain.local/svn/repo‘: SSL handshake failed: SSL error:
Key usage violation in certificate has been detected. (https://server.domain.local)

You may experience the issue if both of the following conditions are met:

• VisualSVN Server has a self-signed certificate applied and
• Subversion client is built against the GnuTLS library.

NoteGnuTLS library is an alternative to OpenSSL. Most Subversion clients for Windows are built against OpenSSL and are not affected by this issue. While some Subversion packages (available mostly on Linux-based operating systems such as Ubuntu and Debian) are built against GnuTLS and are affected. Technical background

During the initial setup VisualSVN Server 2.5 generates a self-signed certificate and adds it to the Trusted Root Certification Authorities store on the local machine. To avoid possible security issues, VisualSVN Server makes this self-signed certificate to be valid for server authentication only (by specifying the ‘Key Usage‘ extension). Subversion clients built against GnuTLS don‘t recognize such certificate and the error occurs.

Workaround

It‘s not recommended to use a self-signed certificate in a production environment. We advise to use a certificate issued by your domain or a third-party certificate authority instead of a self-signed one.

If you have to use a self-signed certificate please follow the instruction to generate a cerificate without specifying ‘Key Usage‘ extension:

1. Add the following registry value to the Windows registry:

   • for 32-bit system:

     [HKEY_LOCAL_MACHINE\SOFTWARE\VisualSVN\VisualSVN Server] "CreateGnuTLSCompatibleCertificate"=dword:00000001

   • for 64-bit system:

     [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\VisualSVN\VisualSVN Server] "CreateGnuTLSCompatibleCertificate"=dword:00000001

2. Start VisualSVN Server Manager.
3. Go to Action | Properties | Certificate.
4. Click Change certificate... and follow the wizard instructions to generate a new self-signed certificate.

The certificate will be generated without the ‘Key Usage‘ extension and will be compatible both with GnuTLS and OpenSSL.

 

http://blog.chinaunix.net/uid-24567872-id-3861366.html

http://blog.csdn.net/xinshou_jiaoming/article/details/6956558

 

 

linux上svn串連visual svn server時ssl鑒權失敗，問題解決(轉)