Yeah, for SSL to work the Subject of the cert must include the hostname in the CN field. So you would need a certificate with CN=source.ptolemy.orgin the subject field.
Matt On Sun, Sep 22, 2013 at 7:56 AM, Christopher Brooks <[email protected]>wrote: > Good idea, but there are problems. > > I set up a CNAME for source.ptolemy.org to point to repo.eecs.berkeley.edu, > but when I point a browser to > https://source.ptolemy.org/svn/projects/eal/pret/, I get a warning about > certs. > > The svn command itself fails: > > ealmac10:~] cxh% svn co > https://source.ptolemy.org/svn/projects/eal/ptII/trunk ptII > svn: OPTIONS of 'https://source.ptolemy.org/svn/projects/eal/ptII/trunk': > SSL handshake failed: SSL error code -1/1/33\ > 6032856 (https://source.ptolemy.org) > > However, using the actual address works. > [ealmac10:~] cxh% svn co > https://repo.eecs.berkeley.edu/svn/projects/eal/ptII/trunk ptII > A ptII/bin > A ptII/bin/ptlndir > A ptII/ptolemy > A ptII/ptolemy/domains > > svn+ssh access is not permitted on this repo. > > The same is true of the anonymous access URL > https://source.ptolemy.org/svn-anon/projects/eal/ptII/ vs. > https://repo.eecs.berkeley.edu/svn-anon/projects/eal/ptII/ > > The only solution I see would be to get source.ptolemy.org added to the > cert and probably to the repo.eecs website itself. > > Any other ideas? > > _Christopher > > > > > On 9/19/13 3:48 PM, Matt Jones wrote: > > Thanks. > > When you move it, how about giving it a CNAME name tied to the service > so that next time you need to move it the service location doesn't have to > be updated? Is there a way you can keep the original hostname active as a > CNAME so that anyone with existing checkouts will continue to be able to > access it? That's why we used 'code.kepler-project.org', a name that can > travel with the SVN service as it migrates across hosts (which we've done > twice since it was created). > > Matt > > > On Thu, Sep 19, 2013 at 1:13 PM, Christopher Brooks <[email protected] > > wrote: > >> The machine that currently has the ptII repository will be retired soon. >> I want to move the repository to a new machine. >> >> I'll be doing the move on Sunday, Oct 22. >> >> After the move is done, I'll update Kepler so that the build works. >> >> _Christopher >> >> -- >> Christopher Brooks, PMP University of California >> Academic Program Manager & Software Engineer US Mail: 337 Cory Hall >> CHESS/iCyPhy/Ptolemy/TerraSwarm Berkeley, CA 94720-1774 >> [email protected], 707.332.0670 (Office: 545Q Cory) >> >> _______________________________________________ >> Kepler-dev mailing list >> [email protected] >> http://lists.nceas.ucsb.edu/kepler/mailman/listinfo/kepler-dev >> > > > > -- > Christopher Brooks, PMP University of California > Academic Program Manager & Software Engineer US Mail: 337 Cory Hall > CHESS/iCyPhy/Ptolemy/TerraSwarm Berkeley, CA > [email protected], 707.332.0670 (Office: 545Q Cory) > >
_______________________________________________ Kepler-dev mailing list [email protected] http://lists.nceas.ucsb.edu/kepler/mailman/listinfo/kepler-dev
