"Server certificate verification failed..." on servers with bad certificates

Create issue
Issue #97 new
David Wolever created an issue

When connecting dealing with an HTTPS server (svn+https) that doesn't have a "good" certificate, the Subversion bindings will throw an exception:

 svn.core.SubversionException: ("OPTIONS of 'https://example.com/': Server certificate verification failed: certificate issued for a different hostname, issuer is not trusted (https://example.com/)", 175002)

And there isn't any obvious (ie, listed in hg help clone or found on Google) way to override this.

Workaround: when you check out the repository with SVN, it will ask you if you want to trust the certificate:

$ svn co https://example.com/ Error validating server certificate for 'https://example.com': \ .... \ (R)eject, accept (t)emporarily or accept (p)ermanently? p

Permanently accept the certificate, then hgsubversion will have no problem talking to the remote server

Comments (5)

  1. Dan Villiom Podlaski Christiansen

    Maybe we should postpone dealing with this until we switch to using SubvertPy?

  2. Augie Fackler repo owner

    Short term, I want to just raise an abort with a good suggestion about 'svn ls <url>', accept permanently.

  3. Steven Behnke

    I'm still having this issue and the last comment on it was 2 years ago. Is there any resolution in sight?

  4. Log in to comment