Bernd May wrote on Wed, Jul 21, 2010 at 15:36:34 +0200:
> What I do want to do now though is to assign specific certificates
> depending on which directory I access on this svn server; i.e
> [groups]
> mygroup = my.server.example.net/svn/myrepo1
> mygroup2 = my.server.example.net/svn/myrepo2
> [mygroup]
> ssl-client-cert-file = /path/to/the/client/cert/mygroup.p12
> [mygroup2]
> ssl-client-cert-file = /path/to/the/client/cert/mygroup2.p12
>
> This does not work so far.
>
> As I understand it, svn simply tries to match the hostname of the server
> against the patterns under [groups] but not the rest of the URI.
>
> Is there a way to change this, or configure svn to match the full URI
> against the pattern?
>
Haven't checked the code, but I wouldn't be surprised if this was hard wired.
(Probably part of the code is in libsvn_ra_{serf,neon} and part in
libsvn_subr.) Could you provide multiple files to the ssl-client-cert-file
setting? Or just concatenate all certs into one big file
(mygroup1-and-mygroup2.p12) and then point to that?
Daniel
(sorry, I don't have time to dive into the source myself right this second.)
> - --
> Bernd
> -----BEGIN PGP SIGNATURE-----
