#131 --trust-server-cert analogue for hostname mistmatch

[Anonymous]

Originally created by: pipping....@gmail.com

Hello,

some hosts will prompt subversion to complain:

- The certificate is not issued by a trusted authority. Use the
   fingerprint to validate the certificate manually!

This can be surpressed by calling svn with --trust-server-cert (which requires --non-interactive). There is also another thing subversion might complain about, though:

  - The certificate hostname does not match.

To my knowledge, there is no flag that makes subversion ignore this problem and continue. If this is true, as a consequence, repositories that yield such problems cannot be accessed by a non-interactive subversion client! (there are horrible workarounds which call `echo t` or `echo p` and pipe that to an interactive subversion client of course).

Maybe you can shed some light on the matter. :)

[Anonymous]

Originally posted by: cmpilato

(No comment was entered for this change.)

Labels: Milestone-whenever

[Anonymous]

Originally posted by: cmpilato

(No comment was entered for this change.)

Owner: cmpilato

[Anonymous]

Originally posted by: cmpilato

(No comment was entered for this change.)

Owner: ---

[Anonymous]

Originally posted by: cmpilato

Unless Subversion grows a feature to ignore certs with mismatched hostnames, there's nothing to document here except the nasty workarounds.  I'm deeming that out of scope for this text.

Status: WontFix

[Anonymous]

Originally posted by: eladkar...@gmail.com

you can push 'p' to accept the certificate through php too, just like you'll do in command line.
see http://icompile.eladkarako.com/shell-svn-from-php/
and
http://serverfault.com/questions/400093/run-svn-commands-with-self-signed-ssl-cert/496819#496819