On Sat, 14 Jun 2025 at 21:39, Graham Leggett via users <
users@subversion.apache.org> wrote:

> On 14 Jun 2025, at 16:52, Branko Čibej <br...@apache.org> wrote:
>
> That error comes from Serf; and there's no more descriptive message
> available. Looking at the code, this happens when something goes badly
> wrong with the network; it can't be the result of something the server sent
> over the wire.
>
> Which version of Serf are you using? And how repeatable is this?
>
>
> This happens if you try to connect to server that requires a client
> certificate, where the client certificate is in the standard windows
> certificate store, and otherwise works fine in Firefox.
>
> Trying a certificate in a P12 makes no difference, not confident I'm
> setting it up in the correct place.
>
> The version is this:
>
> minfrin@PISTACHIO C:\Users\minfrin>svn --version --verbose
>
>
> svn, version 1.14.5 (r1922182)
>
>    compiled Nov 30 2024, 08:20:48 on x86-microsoft-windows
>
>
> Copyright (C) 2024 The Apache Software Foundation.
>
> This software consists of contributions made by many people;
>
> see the NOTICE file for more information.
>
> Subversion is open source software, see http://subversion.apache.org/
>
>
> The following repository access (RA) modules are available:
>
>
> * ra_svn : Module for accessing a repository using the svn network
> protocol.
>
>   - with Cyrus SASL authentication
>
>   - handles 'svn' scheme
>
> * ra_local : Module for accessing a repository on local disk.
>
>   - handles 'file' scheme
>
> * ra_serf : Module for accessing a repository via WebDAV protocol using
> serf.
>
>   - using serf 1.3.10 (compiled with 1.3.10)
>
>   - handles 'http' scheme
>
>   - handles 'https' scheme
>
>
> The following authentication credential caches are available:
>
>
> * Wincrypt cache in C:\Users\minfrin\AppData\Roaming\Subversion
>
>
> System information:
>
>
> * running on x86_64-microsoft-windows10.0.26100
>
>   - Windows 10 Pro, build 26100 [6.3 Client Multiprocessor Free]
>
> * linked dependencies:
>
>   - APR 1.7.5 (compiled with 1.7.5)
>
>   - APR-Util 1.6.3 (compiled with 1.6.3)
>
>   - Expat 2.2.9 (compiled with 2.2.9)
>
>   - SQLite 3.46.1 (compiled with 3.46.1)
>
>   - Utf8proc 2.1.0 (compiled with 2.1.0)
>
>   - ZLib 1.2.13 (compiled with 1.2.13)
>
>   - LZ4 1.7.5 (compiled with 1.7.5)
>
> Regards,
> Graham
> --
>
>
The problem doesn't occur with TortoiseSVN 1.9.7 and the svn.exe client
packaged with it. The SVN client automatically supplies the certificate
stored in the Windows Certificate Store (or using the client cert options
from the servers file).

It appears that I've managed to reproduce this problem with TortoiseSVN
1.14.8 and the svn.exe client:
svn, version 1.14.5 (r1922182)
   compiled Mar  7 2025, 00:14:55 on x86_64-microsoft-windows6.2.9200

Firefox, MS Edge supply the client certificate to the server. But svn.exe,
TortoiseSVN don't and display the error "svn: E120171: Error running
context: An error occurred during SSL communication" when the servers file
is unmodified (default, no modifications to the client cert options).

I've also tried to configure the client cert manually in the servers file
to no avail. The error "An error occurred during SSL communication" is
shown regardless of the options I'm using in the servers file
(ssl-client-cert-file,ssl-authority-files,ssl-client-cert-file-prompt,ssl-client-cert-password
all with valid options). As far as I understand now, I don't have to make
modifications to the servers file on Windows since the certificate is
fetched from Windows Certificate Store automatically.

I haven't tried other versions besides svn 1.14.5 and svn 1.9.7 yet.

-- 
With best regards,
Pavel Lyalyakin
VisualSVN Team

Reply via email to