svn Error validating server certificate
If I use any svn
command communicating with the remote server I get the following error:
Error validating server certificate for 'https://...':
- The certificate is not issued by a trusted authority. Use the
fingerprint to validate the certificate manually!
Certificate information:
- Hostname: ...
- Valid: from Wed, 01 Sep 2010 08:25:36 GMT until Thu, 06 Oct 2011 08:25:36 GMT
- Issuer: ...
开发者_运维知识库- Fingerprint: ...
(R)eject, accept (t)emporarily or accept (p)ermanently?
If I hit permanently I can run the command properly. But on the next svn
command I get the same question and have to confirm again! Why doesn't svn
save my choice permanently? How can I solve this problem?
Thanks for any help!
Fix (for Unix):
svn.ssl.server
is on ~/.subversion/auth
Change Owner recursively on
~/.subversion/auth
or delete:
delete -~/.subversion/auth/svn.ssl.server
owner -chown -R $USER ~/.subversion/auth
Open the command prompt and run
svn list https:...
- Accept certficate permanently by entering
p
.
Have Fun !
Search for the folder named "svn.ssl.server" (it exists for windows and *NIX servers) and delete it. You may be asked one more time to save the key but then it should stop asking after that point.
Fix (for Windows):
- Delete
C:\Users\"USERNAME"\AppData\Roaming\Subversion\auth\svn.ssl.server
- Open the command prompt and run
svn list https:...
- Accept certficate permanently by entering
p
.
Probably not suitable for all users but is okay for me and worked:
I edited in the ~/.subversion/servers the following line:
[global]
ssl-trust-default-ca = no
to
[global]
ssl-trust-default-ca = yes
Solution for SSL Certificate Error Message on SVNX
For Windows User:
Open the command prompt and run svn list https://Your-Link-Goes-Here/
List item Accept certificate permanently by entering p
For Mac User:
- Open the Terminal and Execute this command svn list https://Your-Link-Goes-Here/
- Accept the Certificate Permanently by entering p
Note: For Mac Users make sure your Certificate is already added in Keychain Access
Hope this Helps Someone.
Doing chmod 644 ~/.subversion/auth/svn.ssl.server/*
is simplest for unix users and is best if you connect to multiple servers.
SVN is smart enough to infer that you didn't actually bother verifying that the fingerprint matches.
Ahem.
But in all seriousness, https://sourceforge.net/apps/trac/sourceforge/wiki/Subversion#ServerCertificateVerificationFailed notes that you should open the project url in a trusted browser to check you're not being MITM'ed (should work for non-sourceforge too), e.g. you can try checking that you get the same fingerprint through Tor.
chmod -R 775 ~/.subversion/auth
may also be needed.
精彩评论