Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have recently upgraded to the latest VisualSVN server (on Windows) and now when I try to connect to it from my Linux svn command line client, I get this error:

   svn: OPTIONS of 'https://server:port/svn': SSL negotiation failed: SSL error: Key usage violation in certificate has been detected.

I've tried downloading the PEM crt file and adding it in ~/.subversion/servers (using the ssl-authority-files) but this does not work either.

Does anyone have any suggestions?

share|improve this question

3 Answers 3

up vote 2 down vote accepted

Tekken666's suggestion did not work for me since I am on a shared environment (so I can not delete files in /usr/lib).

However, I got around my issue by simply recompiling subversion from the latest code. The problem seems to be that the svn on my hosted server was using a GNU SSL library instead of the default neon SSL library. Neon is less strict than GNU when it comes to certificate issues.

share|improve this answer
    
Not the best solution, actually. –  bahrep Aug 23 '12 at 14:38
    
Do you really mean 'Neon' or 'OpenSSL'? –  bahrep Aug 23 '12 at 14:40

You can regenerate the certificate so it will be considered valid by GnuTLS. See the VisualSVN Server KB article "VisualSVN Server certificate key usage violation in Subversion clients built against GnuTLS".

share|improve this answer

-1 Uninstall the current libneon package: sudo apt-get remove libneon27

-2 Download the latest libneon package from http://packages.debian.org/squeeze/libneon27 (at the bottom you can choose the right version for your architecture). Install the required libssl dependency: sudo apt-get install libssl0.9.8

-3 Install the downloaded libneon package. E.g. for the 64Bit architecture: dpkg -i libneon27_0.29.3-3_amd64.deb

-4 Change the symbolic links again like described above: sudo mv /usr/lib/libneon-gnutls.so.27 /usr/lib/libneon-gnutls.so.27.old sudo ln -s /usr/lib/libneon.so.27 /usr/lib/libneon-gnutls.so.27

From:http://www.yeap.de/blog2.0/archives/260-Subversion-Certificate-Problems-with-Ubuntu-Precise-Pangolin.html

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.