开发者

svn Error validating server certificate

If I use any svn command communicating with the remote server I get the following error:

Error validating server certificate for 'https://...':
 - The certificate is not issued by a trusted authority. Use the
   fingerprint to validate the certificate manually!
Certificate information:
 - Hostname: ...
 - Valid: from Wed, 01 Sep 2010 08:25:36 GMT until Thu, 06 Oct 2011 08:25:36 GMT
 - Issuer: ...
 开发者_运维知识库- Fingerprint: ...
(R)eject, accept (t)emporarily or accept (p)ermanently? 

If I hit permanently I can run the command properly. But on the next svn command I get the same question and have to confirm again! Why doesn't svn save my choice permanently? How can I solve this problem?

Thanks for any help!


Fix (for Unix):

svn.ssl.server is on ~/.subversion/auth

  • Change Owner recursively on ~/.subversion/auth or delete:
    delete - ~/.subversion/auth/svn.ssl.server
    owner - chown -R $USER ~/.subversion/auth

  • Open the command prompt and run svn list https:...

  • Accept certficate permanently by entering p.

Have Fun !


Search for the folder named "svn.ssl.server" (it exists for windows and *NIX servers) and delete it. You may be asked one more time to save the key but then it should stop asking after that point.


Fix (for Windows):

  • Delete C:\Users\"USERNAME"\AppData\Roaming\Subversion\auth\svn.ssl.server
  • Open the command prompt and run svn list https:...
  • Accept certficate permanently by entering p.


Probably not suitable for all users but is okay for me and worked:

I edited in the ~/.subversion/servers the following line:

[global]
ssl-trust-default-ca = no

to

[global]
ssl-trust-default-ca = yes


Solution for SSL Certificate Error Message on SVNX

For Windows User:

  1. Open the command prompt and run svn list https://Your-Link-Goes-Here/

  2. List item Accept certificate permanently by entering p

For Mac User:

  1. Open the Terminal and Execute this command svn list https://Your-Link-Goes-Here/
  2. Accept the Certificate Permanently by entering p

Note: For Mac Users make sure your Certificate is already added in Keychain Access

Hope this Helps Someone.


Doing chmod 644 ~/.subversion/auth/svn.ssl.server/* is simplest for unix users and is best if you connect to multiple servers.


SVN is smart enough to infer that you didn't actually bother verifying that the fingerprint matches.

Ahem.

But in all seriousness, https://sourceforge.net/apps/trac/sourceforge/wiki/Subversion#ServerCertificateVerificationFailed notes that you should open the project url in a trusted browser to check you're not being MITM'ed (should work for non-sourceforge too), e.g. you can try checking that you get the same fingerprint through Tor.


chmod -R 775 ~/.subversion/auth may also be needed.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜