linux上svn连接visual svn server时ssl鉴权失败,问题解决
2013-04-21 09:22
676 查看
场景:1、在windows 7上安装了visual svn server作为自己的svn服务器。
2、在虚拟机centos 6.3上使用svn客户端check代码,报错:
解决:在网上找到一篇文章,按照它介绍的方法操作,解决问题。明白了,这是因为virtual svn在生成鉴权数据的时候使用了一个插件,而这个插件是OpenSSL支持的,但GnuTls是不支持的。详细的内容大家仔细看吧。感谢这篇文章的原作者,及散播者。
Subversion clients receive the following error message when attempting to connect to VisualSVN Server:
svn: OPTIONS of 'https://server.domain.local/svn/repo': SSL handshake failed: SSL error:
Key usage violation in certificate has been detected. (https://server.domain.local)
You may experience the issue if both of the following conditions are met:
VisualSVN Server has a self-signed certificate applied and
Subversion client is built against the GnuTLS library.
NoteGnuTLS library is an alternative to OpenSSL. Most Subversion clients
for Windows are built against OpenSSL and are not affected by this issue. While some Subversion packages (available mostly on Linux-based operating systems such as Ubuntu and Debian) are built against GnuTLS and are affected.
During the initial setup VisualSVN Server 2.5 generates a self-signed certificate and adds it to the Trusted Root Certification Authorities store on the local machine. To avoid possible security issues, VisualSVN Server makes this self-signed certificate to
be valid for server authentication only (by specifying the 'Key Usage' extension). Subversion clients built against GnuTLS don't recognize such certificate and the error occurs.
It's not recommended to use a self-signed certificate in a production environment. We advise to use a certificate issued by your domain or a third-party certificate authority instead of a self-signed one.
If you have to use a self-signed certificate please follow the instruction to generate a cerificate without specifying 'Key Usage' extension:
Add the following registry value to the Windows registry:
for 32-bit system:
for 64-bit system:
Start VisualSVN Server Manager.
Go to Action | Properties | Certificate.
Click Change certificate... and follow the wizard instructions to generate a new self-signed certificate.
The certificate will be generated without the 'Key Usage' extension and will be compatible both with GnuTLS and OpenSSL.
2、在虚拟机centos 6.3上使用svn客户端check代码,报错:
#svn checkout https://192.168.0.104:8443/svn/DblList svn: OPTIONS of 'https://192.168.0.104:8443/svn/DblList': SSL handshake failed: SSL error: Key usage violation in certificate has been detected. (https://192.168.0.104:8443)
解决:在网上找到一篇文章,按照它介绍的方法操作,解决问题。明白了,这是因为virtual svn在生成鉴权数据的时候使用了一个插件,而这个插件是OpenSSL支持的,但GnuTls是不支持的。详细的内容大家仔细看吧。感谢这篇文章的原作者,及散播者。
Symptoms
Subversion clients receive the following error message when attempting to connect to VisualSVN Server:svn: OPTIONS of 'https://server.domain.local/svn/repo': SSL handshake failed: SSL error:
Key usage violation in certificate has been detected. (https://server.domain.local)
You may experience the issue if both of the following conditions are met:
VisualSVN Server has a self-signed certificate applied and
Subversion client is built against the GnuTLS library.
NoteGnuTLS library is an alternative to OpenSSL. Most Subversion clients
for Windows are built against OpenSSL and are not affected by this issue. While some Subversion packages (available mostly on Linux-based operating systems such as Ubuntu and Debian) are built against GnuTLS and are affected.
Technical background
During the initial setup VisualSVN Server 2.5 generates a self-signed certificate and adds it to the Trusted Root Certification Authorities store on the local machine. To avoid possible security issues, VisualSVN Server makes this self-signed certificate tobe valid for server authentication only (by specifying the 'Key Usage' extension). Subversion clients built against GnuTLS don't recognize such certificate and the error occurs.
Workaround
It's not recommended to use a self-signed certificate in a production environment. We advise to use a certificate issued by your domain or a third-party certificate authority instead of a self-signed one.If you have to use a self-signed certificate please follow the instruction to generate a cerificate without specifying 'Key Usage' extension:
Add the following registry value to the Windows registry:
for 32-bit system:
[HKEY_LOCAL_MACHINE\SOFTWARE\VisualSVN\VisualSVN Server] "CreateGnuTLSCompatibleCertificate"=dword:00000001
for 64-bit system:
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\VisualSVN\VisualSVN Server] "CreateGnuTLSCompatibleCertificate"=dword:00000001
Start VisualSVN Server Manager.
Go to Action | Properties | Certificate.
Click Change certificate... and follow the wizard instructions to generate a new self-signed certificate.
The certificate will be generated without the 'Key Usage' extension and will be compatible both with GnuTLS and OpenSSL.
相关文章推荐
- linux上svn连接visual svn server时ssl鉴权失败,问题解决
- linux上svn连接visual svn server时ssl鉴权失败,问题解决
- linux上svn连接visual svn server时ssl鉴权失败,问题解决(转)
- linux上svn连接visual svn server时ssl鉴权失败,问题解决 SSL handshake failed: SSL error: Key usage violation in ce
- VisualSvnServer2.0.8安装失败问题解决
- svn连接linux svn 服务器失败解决
- 解决:Windows 强制升级为8.1之后 Mysql连接不上, VisualSVN Server无服务
- 遇到问题解决问题-----VIsualSVN Server的安装
- VisualSVN Server —— Service“Visual Server” failed to start.“ 问题解决方案
- visual svnserver 安装失败(服务启动失败)解决方法
- mysql连接linux系统提示“登录出现1130 is not allowed to connect to this MySql server”问题,解决方法
- mysql连接linux系统提示“登录出现1130 is not allowed to connect to this MySql server”问题,解决方法
- 解决问题:阿里云服务器Svn-Server无法连接,阿里云服务器SVNServer配置
- VisualSVN Server安装失败解决
- mysql连接linux系统提示“登录出现1130 is not allowed to connect to this MySql server”问题,解决方法
- VisualSVN Server安装在Win2003Server上CPU占用率高问题解决方案
- VisualSVN Server安装过程中出现Service“Visual Server” failed to start.“ 问题解决方案
- win8安装 VisualSVN Server 服务失败解决办法——花生壳+visiualSVN实现外网访问局域网内的SVN(二)
- mysql连接linux系统提示“登录出现1130 is not allowed to connect to this MySql server”问题的解决方法
- Linux-ubuntu连接投影仪失败(分辨率不匹配)问题解决