<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>JohnMark.org Headquarters &#187; Subversion</title>
	<atom:link href="http://www.johnmark.org/blog/category/articles/subversion-articles/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.johnmark.org/blog</link>
	<description>Just another John Mark production</description>
	<lastBuildDate>Tue, 27 Jul 2010 18:22:11 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>Re: Error Validating Certificate</title>
		<link>http://www.johnmark.org/blog/2009/03/re-error-validating-certificate/</link>
		<comments>http://www.johnmark.org/blog/2009/03/re-error-validating-certificate/#comments</comments>
		<pubDate>Thu, 05 Mar 2009 21:35:59 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Subversion]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[Yes it is true we build and bundle our own OpenSSL library.  I've opened a
ticket internally to bundle a default trusted certificates list with out
package.

Mark


On 3/5/09 12:40 PM, "Raj Singh"  wrote:

&#62; bench@host30:/shares/perf/bench/examinator/trunk&#62; /usr/local/bin/svn up
&#62; Error validating server certificate for 'https://svn.terracotta.org:443':
&#62;  - The certificate is not issued by a trusted authority. Use the
&#62;    fingerprint to validate the certificate manually!
&#62; Certificate information:
&#62;  - Hostname: svn.terracotta.org
&#62;  - Valid: from Fri, 01 Dec 2006 23:06:57 GMT until Tue, 01 Dec 2009 23:06:57
&#62; GMT
&#62;  - Issuer: Equifax Secure Certificate Authority, Equifax, US
&#62;  - Fingerprint: 32:14:3f:9f:ac:de:b1:a9:c7:1f:89:a3:7f:73:a4:25:a6:a4:3c:84
&#62; (R)eject or accept (t)emporarily? t
&#62; Authentication realm:  Terracotta Realm
&#62; Password for 'bench':
&#62; Authentication realm:  Terracotta Realm
&#62; Username: bench
&#62; Password for 'bench':
&#62; Authentication realm:  Terracotta Realm
&#62; Username:
&#62;
&#62;
&#62; Actually, this is a question about SSL libraries. Collabnet subversion looks
&#62; like it links against its own SSL libraries and not those of the system.
&#62;
&#62; $ ldd /usr/local/bin/svn &#124; egrep "ssl&#124;crypto"
&#62;         libssl.so.0.9.8 =&#62; //opt/CollabNet_Subv​ersion/lib/libssl.so​.0.9.8
&#62; (0x00002b9dd1332000)
&#62;         libcrypto.so.0.9.8 =&#62;
&#62; //opt/CollabNet_Subv​ersion/lib/libcrypto​.so.0.9.8 (0x00002b9dd1479000)
&#62;
&#62; My binaries that are linked against the system OpenSSL libs have no trouble
&#62; with the certificate authority (which is Equifax/Geotrust BTW, so it's not
&#62; like it's even some self-signed CA)
&#62;
&#62; ------------------------------------------------------
&#62; http://subversion.open.collab.net/ds/viewMessage.do?dsForumId=4&#38;dsMessageId=30
&#62; 3791]]></description>
			<content:encoded><![CDATA[<p>Yes it is true we build and bundle our own OpenSSL library.  I&#8217;ve opened a<br />
ticket internally to bundle a default trusted certificates list with out<br />
package.</p>
<p>Mark</p>
<p>On 3/5/09 12:40 PM, &#8220;Raj Singh&#8221; <raj_942@yahoo.com> wrote:</p>
<p>> bench@host30:/shares/perf/bench/examinator/trunk> /usr/local/bin/svn up<br />
> Error validating server certificate for &#8216;https://svn.terracotta.org:443&#8242;:<br />
>  &#8211; The certificate is not issued by a trusted authority. Use the<br />
>    fingerprint to validate the certificate manually!<br />
> Certificate information:<br />
>  &#8211; Hostname: svn.terracotta.org<br />
>  &#8211; Valid: from Fri, 01 Dec 2006 23:06:57 GMT until Tue, 01 Dec 2009 23:06:57<br />
> GMT<br />
>  &#8211; Issuer: Equifax Secure Certificate Authority, Equifax, US<br />
>  &#8211; Fingerprint: 32:14:3f:9f:ac:de:b1:a9:c7:1f:89:a3:7f:73:a4:25:a6:a4:3c:84<br />
> (R)eject or accept (t)emporarily? t<br />
> Authentication realm: <https://svn.terracotta.org:443> Terracotta Realm<br />
> Password for &#8216;bench&#8217;:<br />
> Authentication realm: <https://svn.terracotta.org:443> Terracotta Realm<br />
> Username: bench<br />
> Password for &#8216;bench&#8217;:<br />
> Authentication realm: <https://svn.terracotta.org:443> Terracotta Realm<br />
> Username:<br />
><br />
><br />
> Actually, this is a question about SSL libraries. Collabnet subversion looks<br />
> like it links against its own SSL libraries and not those of the system.<br />
><br />
> $ ldd /usr/local/bin/svn | egrep &#8220;ssl|crypto&#8221;<br />
>         libssl.so.0.9.8 => //opt/CollabNet_Subv​ersion/lib/libssl.so​.0.9.8<br />
> (0x00002b9dd1332000)<br />
>         libcrypto.so.0.9.8 =><br />
> //opt/CollabNet_Subv​ersion/lib/libcrypto​.so.0.9.8 (0x00002b9dd1479000)<br />
><br />
> My binaries that are linked against the system OpenSSL libs have no trouble<br />
> with the certificate authority (which is Equifax/Geotrust BTW, so it&#8217;s not<br />
> like it&#8217;s even some self-signed CA)<br />
><br />
> &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;<br />
> http://subversion.open.collab.net/ds/viewMessage.do?dsForumId=4&#038;dsMessageId=30<br />
> 3791</p>
<p><map name='google_ad_map_1491_bdfb6b8d2a9af00f'>
<area shape='rect' href='http://imageads.googleadservices.com/pagead/imgclick/1491?pos=0' coords='1,2,367,28' />
<area shape='rect' href='http://services.google.com/feedback/abg' coords='384,10,453,23'/></map>
<img usemap='#google_ad_map_1491_bdfb6b8d2a9af00f' border='0' src='http://imageads.googleadservices.com/pagead/ads?format=468x30_aff_img&amp;client=&amp;channel=&amp;output=png&amp;cuid=1491&amp;url= http%3A%2F%2Fwww.johnmark.org%2Fblog%2F2009%2F03%2Fre-error-validating-certificate%2F' /></p>]]></content:encoded>
			<wfw:commentRss>http://www.johnmark.org/blog/2009/03/re-error-validating-certificate/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Subversion apache2 nis authentication</title>
		<link>http://www.johnmark.org/blog/2009/03/subversion-apache2-nis-authentication/</link>
		<comments>http://www.johnmark.org/blog/2009/03/subversion-apache2-nis-authentication/#comments</comments>
		<pubDate>Thu, 05 Mar 2009 21:30:20 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Subversion]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[I have installed subversion 1.5.5-1 on CentOS 4.4.

I followed http://www.yolinux.com/TUTORIALS/LinuxTutorialApacheAddingLoginSiteProtection.html#NIS

I followed all the steps except I downloaded and installed "Apache2-AuthenNIS-0.15" instead of "Apache-AuthenNIS-0.13".

I added following in /etc/opt/CollabNet_Subversion/conf/httpd.conf.

# Code for nis authentication
<directory /var/svn/repos>
	AuthType Basic
	AuthName "Enter your login ID:"
	PerlAuthenHandler Apache2::AuthenNIS
	PerlSetVar AllowAlternateAuth no
	require valid-user
</directory>

Now, svn configuration fails with the following error:

Stopping CollabNet Subversion: Syntax error on line 128 of /etc/opt/CollabNet_Subversion/conf/httpd.conf:
Invalid command 'PerlAuthenHandler', perhaps misspelled or defined by a module not included in the server configuration
Starting CollabNet Subversion: Syntax error on line 128 of /etc/opt/CollabNet_Subversion/conf/httpd.conf:
Invalid command 'PerlAuthenHandler', perhaps misspelled or defined by a module not included in the server configuration

When I try to install mod_perl2 (mod_perl-2.0.4):

cd mod_perl-2.0.4
perl Makefile.PL
...
Please provide a full path to 'apxs' executable
(press Enter if you don't have it installed):  /opt/CollabNet_Subversion/bin/apxs

[  error] Unable to open /opt/CollabNet_Subversion/include/ap_release.h: No such file or directory
[  error] Unable to determine server version, aborting.
[  error] Invalid MP_APXS specified?

I can not file /opt/CollabNet_Subversion/include directory in Collabnet's installation.

Please help.]]></description>
			<content:encoded><![CDATA[<p>I have installed subversion 1.5.5-1 on CentOS 4.4.</p>
<p>I followed http://www.yolinux.com/TUTORIALS/LinuxTutorialApacheAddingLoginSiteProtection.html#NIS</p>
<p>I followed all the steps except I downloaded and installed &#8220;Apache2-AuthenNIS-0.15&#8243; instead of &#8220;Apache-AuthenNIS-0.13&#8243;.</p>
<p>I added following in /etc/opt/CollabNet_Subversion/conf/httpd.conf.</p>
<p># Code for nis authentication<br />
<directory /var/svn/repos><br />
	AuthType Basic<br />
	AuthName &#8220;Enter your login ID:&#8221;<br />
	PerlAuthenHandler Apache2::AuthenNIS<br />
	PerlSetVar AllowAlternateAuth no<br />
	require valid-user<br />
</directory></p>
<p>Now, svn configuration fails with the following error:</p>
<p>Stopping CollabNet Subversion: Syntax error on line 128 of /etc/opt/CollabNet_Subversion/conf/httpd.conf:<br />
Invalid command &#8216;PerlAuthenHandler&#8217;, perhaps misspelled or defined by a module not included in the server configuration<br />
Starting CollabNet Subversion: Syntax error on line 128 of /etc/opt/CollabNet_Subversion/conf/httpd.conf:<br />
Invalid command &#8216;PerlAuthenHandler&#8217;, perhaps misspelled or defined by a module not included in the server configuration</p>
<p>When I try to install mod_perl2 (mod_perl-2.0.4):</p>
<p>cd mod_perl-2.0.4<br />
perl Makefile.PL<br />
&#8230;<br />
Please provide a full path to &#8216;apxs&#8217; executable<br />
(press Enter if you don&#8217;t have it installed):  /opt/CollabNet_Subversion/bin/apxs</p>
<p>[  error] Unable to open /opt/CollabNet_Subversion/include/ap_release.h: No such file or directory<br />
[  error] Unable to determine server version, aborting.<br />
[  error] Invalid MP_APXS specified?</p>
<p>I can not file /opt/CollabNet_Subversion/include directory in Collabnet&#8217;s installation.</p>
<p>Please help.</p>
<p><map name='google_ad_map_1490_bdfb6b8d2a9af00f'>
<area shape='rect' href='http://imageads.googleadservices.com/pagead/imgclick/1490?pos=0' coords='1,2,367,28' />
<area shape='rect' href='http://services.google.com/feedback/abg' coords='384,10,453,23'/></map>
<img usemap='#google_ad_map_1490_bdfb6b8d2a9af00f' border='0' src='http://imageads.googleadservices.com/pagead/ads?format=468x30_aff_img&amp;client=&amp;channel=&amp;output=png&amp;cuid=1490&amp;url= http%3A%2F%2Fwww.johnmark.org%2Fblog%2F2009%2F03%2Fsubversion-apache2-nis-authentication%2F' /></p>]]></content:encoded>
			<wfw:commentRss>http://www.johnmark.org/blog/2009/03/subversion-apache2-nis-authentication/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
