Mailing-List: contact dev-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Developers List" <dev@tomcat.apache.org>
Received-SPF: pass (athena.apache.org: domain of sebbaz@gmail.com designates
 209.85.212.177 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <530777EF.4070407@christopherschultz.net>
References: <530777EF.4070407@christopherschultz.net>
Date: Fri, 21 Feb 2014 16:09:29 +0000
Message-ID: 
 <CAOGo0VbhEHdNKGCJ+GishzyU94qCy9QWN3rpmkWixr80+RSJSA@mail.gmail.com>
Subject: Re: ASF svn server certficate + svn client
From: sebb <sebbaz@gmail.com>
To: Tomcat Developers List <dev@tomcat.apache.org>
Content-Type: text/plain; charset=ISO-8859-1

The certs were changed recently. The new fingerprints should be on the
infra website somewhere.

A quick search found the outdated details for svn.apache.org:

http://www.apache.org/dev/version-control.html#cert

The uptodate list seems to be here:

http://www.apache.org/dev/machines.html#ssl-keys


On 21 February 2014 15:59, Christopher Schultz
<chris@christopherschultz.net> wrote:
> All,
>
> I just tried to do an 'svn up' for tcnative and I got this response:
>
> $ svn up
> Updating '.':
> Error validating server certificate for 'https://svn.apache.org:443':
>  - The certificate is not issued by a trusted authority. Use the
>    fingerprint to validate the certificate manually!
> Certificate information:
>  - Hostname: *.apache.org
>  - Valid: from Feb  7 00:00:00 2014 GMT until Apr  7 23:59:59 2016 GMT
>  - Issuer: Thawte, Inc., US
>  - Fingerprint: DD:73:02:E6:4F:9E:FC:48:82:CC:61:68:F6:98:F0:AA:66:43:84:78
> (R)eject, accept (t)emporarily or accept (p)ermanently?
>
> Is this just a problem with Subversion? I notice that the cert is a
> wildcard cert but the error is about the CA. Am I missing something?
>
> I use brew to install recent svn versions onto Mac OS X Mavericks, and I
> made sure I was using the latest svn version available via brew. Firefox
> seems happy, so I suspect it's just a missing CA intermediate
> certificate or something.
>
> Any suggestions?
>
> Thanks,
> -chris
>

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org