SVN SSL Certificate Issue

[warmerdam]

SVN operations against repositories, such as the GDAL repository result in a message like the following:

warmerda@gdal3200% svn update Error validating server certificate for '​https://svn.osgeo.org:443':

• The certificate is not issued by a trusted authority. Use the fingerprint to validate the certificate manually!

Certificate information:

• Hostname: *.osgeo.org
• Valid: from Feb 28 00:00:00 2007 GMT until Apr 27 23:59:59 2008 GMT
• Issuer: www.digicert.com, DigiCert Inc, US
• Fingerprint: 02:72:c7:2a:c8:b4:64:1b:cc:11:4c:8b:ca:b0:b6:6e:60:86:47:7e

(R)eject, accept (t)emporarily or accept (p)ermanently?

Why is that, and can we fix it?

Howard indicated that you were looking into this issue Shawn, so I have assigned it directly to you.

[sbarnes]

​https://svn.osgeo.org/osgeoconfig/apache/conf.d/hosts/subversion.conf was different from what was on the server. They are now the same.

There is no need for SSLCertificateChainFile line.

I've tested this on a couple of browsers and seems to be working. I'm setting fixed.

shawn

[warmerdam]

warmerda@gdal3200% svn update
Error validating server certificate for 'https://svn.osgeo.org:443':
 - The certificate is not issued by a trusted authority. Use the
   fingerprint to validate the certificate manually!
Certificate information:
 - Hostname: *.osgeo.org
 - Valid: from Feb 28 00:00:00 2007 GMT until Apr 27 23:59:59 2008 GMT
 - Issuer: www.digicert.com, DigiCert Inc, US
 - Fingerprint: 02:72:c7:2a:c8:b4:64:1b:cc:11:4c:8b:ca:b0:b6:6e:60:86:47:7e
(R)eject, accept (t)emporarily or accept (p)ermanently? 

I'm still getting the same error. This is subversion client 1.3.0 on Cygwin. I get the same error doing a fresh checkout on this machine.

However, on a different machine I blew away my ~/.subversion and ~/.ssh directory, did a fresh checkout and did not have this problem. At this point I am suspecting there is something funky with my cygwin environment. I will reopen this ticket if I run into a similar problem on any other machine.

Thanks!