AnkhSVN CA 证书存储在哪里?
我的 Subversion 存储库可通过 HTTPS 访问。我有一个自签名的 CA 根证书,并且服务器使用用该证书签名的证书。
CA 根证书存储在受信任的根证书颁发机构
中,这意味着(例如)Internet Explorer 可以识别它。
另一方面,AnkhSVN 报告“该服务器的证书存在一些问题”。那么:AnkhSVN 使用什么作为其证书存储?看来不是Windows版的。我如何将我的 CA 根证书放在那里?
更新:我的网站使用名为“www.example.com”的证书进行保护,父证书是“ca.example.com”,它是自签名的。 “ca.example.com”位于受信任的根权限存储中。当我浏览到 https://www.example.com/svn/ 时,IE 显示挂锁图标,并且认证路径看起来不错。当我将 AnkhSVN 指向同一位置(通过使用文件/Subversion/从 Subversion 打开)时,它会显示警告消息。
SVN 命令行不会抱怨。
注意:我还没有尝试过 TortoiseSVN。
我预感这可能是 Windows 的 WebDAV 客户端,于是我用 Word 进行了检查。效果很好。 Windows 7“添加网络位置”功能接受证书,提示输入我的凭据,然后不起作用(但这是 Windows 中基于 HTTPS 的 WebDAV 的一个已知问题)。
My Subversion repository is available over HTTPS. I've got a self-signed CA root certificate, and the server uses a certificate signed with that.
The CA root certificate is stored in Trusted Root Certification Authorities
, which means that (for example) Internet Explorer recognises it.
AnkhSVN, on the other hand, reports "There are some problems with this server's certificate". So: what is AnkhSVN using as its certificate store? It doesn't appear to be the Windows one. And how do I put my CA root certificate in there?
Update: My website is secured with a certificate named 'www.example.com', the parent certificate is 'ca.example.com', which is self-signed. 'ca.example.com' is in the Trusted Root Authorities store. When I browse to https://www.example.com/svn/, IE shows the padlock icon, and the certification path looks good. When I point AnkhSVN at the same place (by using File / Subversion / Open from Subversion), it brings up the warning message.
The SVN command line doesn't complain.
Note: I haven't tried it with TortoiseSVN yet.
On a hunch that it might be Windows' WebDAV client, I checked with Word. It works fine. The Windows 7 "Add Network Location" feature accepts the certificate, prompts for my credentials and then doesn't work (but that's a known problem with WebDAV over HTTPS in Windows).
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
最可能的原因是您的证书链未验证或无法检查。
要进行验证,请使用 IE8:
The most likely cause is that your certificate chain does not verify or cannot be checked.
To verify, using IE8: