On Fri, Oct 24, 2014 at 4:49 PM, Sean McBride <s...@rogue-research.com> wrote:
> Hi there,
>
> On some computers only, 'svn info' is always giving:
>
> svn: E120171: Error running context: An error occurred during SSL 
> communication
>
> when connecting to our own svn server.  This worked previously, but stopped 
> working (I think) after our self-signed certificate expired and was therefore 
> replaced.  First we replaced it with another self-signed cert, then we 
> replaced it with a purchased wildcard cert.
>
> - I reproduce this with svn 1.8.10 (Wandisco binaries on OS X) on the client.

I've seen such SSL failures on Mac's before. It was caused by not
having an up to date OpenSSL library installed. Not all distributions
of svn do that apparently (e.g. Homebrew).

Older OpenSSL versions don't always support recent X509 certificates,
a (well known) example is the use of SHA-256 as signature hash
algorithm, where older OpenSSL versions support SHA-1, but not
SHA-256.

> - Server runs 1.7.18 (Wandisco binaries on OS X).
> - I have deleted ~/.subversion on the client, no help.
> - I created an entire new user account on the client machine, no help.
> - visiting https://my.server.com/path/to/repository in a browser (tried 
> several) prompts for authentication, succeeds, and shows the expected files.
> - I ran "openssl s_client -showcerts -connect <my.server.com>:443" and it 
> reports at the end:
>   "Verify return code: 0 (ok)"
>
> I'm now feeling pretty stuck. :(  Any suggestions on what this problem is, or 
> how I can diagnose it further?
>

Personally I've always stuck with using svn from Mac Ports; which
automatically installs the latest OpenSSL.

Lieven

> PS: First post to this list, please be gentle. :)
>
> Thanks,
>
> --
> ____________________________________________________________
> Sean McBride, B. Eng                 s...@rogue-research.com
> Rogue Research                        www.rogue-research.com
> Mac Software Developer              Montréal, Québec, Canada
>
>

Reply via email to