1. Augie Fackler
  2. hgsubversion
  3. Issues
Issue #410 wontfix

SSL negotiation failed

Christoph Jüngling
created an issue

I tried to clone a SVN repo from https://myserver/svn/myproject, which fails with the error message "abort: OPTIONS of 'https://myserver/svn/myproject': SSL negotiation failed: SSL error code -1/1/336032856 (https://myserver)".

The client PC is running Windows 7. Subversion 1.8.4 is installed with TortoiseSVN 1.8.3.

The repo can be accessed properly with TortoiseSvn and has the usual "trunk/tags/branches" layout.

The server has a private certificate and .htaccess security, and I specified its fingerprint and the login data in the user's mercurial.ini:

hgsubversion = ~\hgsubversion\hgsubversion

myserver = 12:34:56:78:etc

myserver.prefix = myserver 
myserver.username = myusername
myserver.password = mypassword

host = proxy.mydomain.com:port
no = myserver

No matter if I specify "https" or "svn+https" as protocol the above error message raises. Also no matter if "Do not verify host certificate" is checked or not.

I tested this with the latest stable branch (cset <<d0f3a5c2cb56>>) and the latest default branch (cset <<91cf81a36236>>).

Comments (7)

  1. Augie Fackler repo owner

    Because hgsubversion uses Subversion's underlying libraries to connect to the server, it can't respect [hostfingerprints] and other hg-level configuration knobs. You'll want to do the svn equivalent, which I think lives in ~/.subversion

  2. Christoph Jüngling reporter

    Thanks for your answer. There is no problem with SVN (TortoiseSVN and svn console command) to access the repository on the same machine with the same user, so I suppose there must be another reason. I deleted the SVN login credentials and entered them again. BTW, the location on W7 is ~\AppData\Roaming\Subversion\auth\, pwd is saved encrypted.

  3. Christoph Jüngling reporter

    Perhaps that nails it, because I'm using THg 64bit on Windows 7. Unfortunately I can't install the 32bit version here, itself tells me it's impossible to use the 32bit installer on a 64bit system.

  4. Log in to comment