Re: several DAV/SSL problems with sitecopy 0.15.1

Hiya,

On Wed, Jun 15, 2005 at 02:16:13PM -0500, Timothee Besset wrote:
> I have setup sitecopy to fetch down content from a remote DAV server
> over https, and hit a number of issues:
> 
> - I found that the --fetch command requests a Depth: Infinity PROPFIND (
> maybe other commands do as well ). This is disabled by default on
> apache2 servers, and the server logs aren't likely to tell you anything.
> I had to get sitecopy running with --debug=httpbody to spot it.
> http://httpd.apache.org/docs-2.0/mod/mod_dav.html#davdepthinfinity

Yup - that should be in a FAQ somewhere!

> - then sitecopy was aborting with NE_SSL_UNTRUSTED and NE_SSL_IDMISMATCH
> errors, because the SSL certificate name didn't match server IP. While I
> appreciate being warned about this, I know everything is fine and
> sitecopy should continue connecting. ( this happens if you cert uses an
> internal server name, and you use an IP to access for instance ).

If you do

 $ rm .sitecopy/sitename.crt

then sitecopy will prompt again for you to accept the certificate, and 
then store that cert for future invocations. If the ceriticate presented 
ever differs from the cached version, sitecopy fails with the errors.  

Something better could be done here probably, but this is "fail safe", 
at least.

Regards,

joe
_______________________________________________
sitecopy maillist  -  [email protected]
http://dav.lyra.org/mailman/listinfo/sitecopy