Re: CVS repository retired

On Sun, May 04, 2003 at 03:52:39PM -0300, Lalo Martins wrote:
> On Sat, May 03, 2003 at 09:02:12PM -0600, Micah Dowty wrote:
> > 
> > Navi is also running a virtual host with SSL enabled. You can
> > use https://navi.picogui.org:8443 for a secure connection.
> 
> Is it possible to get rid of
> Error validating server certificate: Unknown certificate issuer. Accept? (y/N): y
> (perhaps by telling svn to permanently accept this certificate)?

The subversion mailing list had some answers to this. There are two
methods to get rid of the warning:

 1. Ignore any unknown certificate authorities

    This is easy, but could possibly open you up for a man-in-the-middle
    attack. Just stick something like the following in your
    ~/.subversion/servers file:

    ------8<------
    [groups]
    picogui = *.picogui.org

    [picogui]
    ssl-ignore-unknown-ca = true
    ------>8------ 

 2. Explicitly allow navi's CA

    I created a new SSL key for navi using Apache's "Snake Oil"
    certificate authority. Download the file:

       http://navi.picogui.org:8080/snakeoil-ca-rsa.crt

    ...and add something like this to ~/.subversion/servers:

    ------8<------
    [groups]
    picogui = *.picogui.org

    [picogui]
    ssl-authorities-file = /home/micah/.subversion/snakeoil-ca-rsa.crt
    ------>8------

--Micah

-- 
Only you can prevent creeping featurism!


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf