> -----Original Message----- > From: Daniel Widdis [mailto:wid...@gmail.com] > Sent: zaterdag 1 maart 2014 05:06 > To: users@subversion.apache.org > Subject: Update from 1.8.5 to 1.8.8 breaks my self-signed numeric IP > certificate > > I recently upgraded from 1.8.5 to 1.8.8 via macports. The new version > refused to permanently accept my self-signed certificate, citing an > "unknown error".
We fixed a bug in Subversion where we accidentally accepted certificate issues that were reported after a different first certificate problem. My guess would be that your selfsigned certificate is not completely valid, but we accidentally accepted it before because the first report was just that you weren't a known certificate authority. The second error could then be something like a problem in the certificate chain. It could help to upgrade your serf to the latest version as this changes the handling of a few certificate checks. If the internal error is X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE (which I happened to reproduce locally some time ago), upgrading to the latest serf should resolve this problem for you. Bert