Ubuntu SVN客户端连接windows VisualSVN SSL证书问题

润物无声 — Fri, 30 Aug 2013 02:29:50 +0000

问题

英文：svn: OPTIONS of 'https://server.domain.local/svn/repo': SSL handshake failed: SSL error:
Key usage violation in certificate has been detected. (https://server.domain.local)

中文：SSL handshake failed: SSL 错误：在证书中检测到违规的密钥用法。

解决方案

Symptoms

Subversion clients receive the following error message when attempting to connect to VisualSVN Server:

svn: OPTIONS of 'https://server.domain.local/svn/repo': SSL handshake failed: SSL error:
Key usage violation in certificate has been detected. (https://server.domain.local)

You may experience the issue if both of the following conditions are met:

VisualSVN Server has a self-signed certificate applied and
Subversion client is built against the GnuTLS library.

NoteGnuTLS library is an alternative to OpenSSL. Most Subversion clients for Windows are built against OpenSSL and are not affected by this issue. While some Subversion packages (available mostly on Linux-based operating systems such as Ubuntu and Debian) are built against GnuTLS and are affected.

Technical background

During the initial setup VisualSVN Server 2.5 generates a self-signed certificate and adds it to the Trusted Root Certification Authorities store on the local machine. To avoid possible security issues, VisualSVN Server makes this self-signed certificate to be valid for server authentication only (by specifying the 'Key Usage' extension). Subversion clients built against GnuTLS don't recognize such certificate and the error occurs.

Workaround

It's not recommended to use a self-signed certificate in a production environment. We advise to use a certificate issued by your domain or a third-party certificate authority instead of a self-signed one.

If you have to use a self-signed certificate please follow the instruction to generate a cerificate without specifying 'Key Usage' extension:

Add the following registry value to the Windows registry（修改注册表，添加一条dword类型的键值）:

for 32-bit system:

[HKEY_LOCAL_MACHINE\SOFTWARE\VisualSVN\VisualSVN Server]
"CreateGnuTLSCompatibleCertificate"=dword:00000001

for 64-bit system:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\VisualSVN\VisualSVN Server]
"CreateGnuTLSCompatibleCertificate"=dword:00000001

Start VisualSVN Server Manager.
Go to Action | Properties | Certificate.
Click Change certificate...（重新生成新证书） and follow the wizard instructions to generate a new self-signed certificate.

The certificate will be generated without the 'Key Usage' extension and will be compatible both with GnuTLS and OpenSSL.

参考资料

1. http://www.visualsvn.com/support/topic/00056/

Ubuntu SVN客户端连接windows VisualSVN SSL证书问题，首发于润物无声。

巧用DOS脚本删除工程的SVN信息

润物无声 — Tue, 05 Jul 2011 12:33:52 +0000

从网络上的SVN服务器上面把代码下载下来，有时候想完全去除掉该工程项目的svn信息，我们都知道svn信息保存在工程项目中的每个隐藏的.svn文件夹下面，如果手动删除的话，有可能删除不完全，导致重新导入的时候会出现错误，本文分享一个实用的dos脚本，只要将其放置到工程项目的根目录下，单击运行一次即可，就会全部清除掉隐藏的svn文件信息。

代码如下：

@echo off
for /r %%a in (.) do if exist %%a.svn rd /s/q %%a.svn
pause
@echo on

将其拷贝到本地的文本文件中，命名为removesvn.bat即可。

然后将 removesvn.bat 放到需要清除svn信息的工程文件夹中运行一次就ok。

巧用DOS脚本删除工程的SVN信息，首发于润物无声。