On Thursday, August 8, 2019 at 6:29:35 PM UTC+2, Stefan wrote: > > > > On Thursday, August 8, 2019 at 6:16:32 PM UTC+2, SquishyZA wrote: >> >> >> Work around: >> >> Create a registry key: HKCU\Software\TortoiseSVN\OpenSSLCapi as a DWORD >> and set its value to 0. After doing this TortoiseSVN works. >> >> > Since the e_capi module of OpenSSL is not included in a default build, > other svn clients usually don't have that OpenSSL module even built in. > > If the authentication fails if that module is enabled then that means that > the clients don't have the ssl certificate imported into the windows crypt > store. If they had, then it would/should work. > > > >> Other notes: >> >> I can reproduce the issue without step 2, so the other CLI does not >> "interfere". It is just a useful troubleshooting step and stopgap while >> TortoiseSVN was down. Older versions (1.10.?) did not have this problem, >> but sadly I can not remember precisely which version I had before I >> upgraded. > > > It could also be that your ssl certificate uses old ciphers which are not > included in the latest OpenSSL anymore. And TSVN uses the very latest > OpenSSL version, where other svn clients often use the LTS version of > OpenSSL which might have those old ciphers still enabled. > > I am also seeing this issue. When the server is running OpenSSL 1.1.1 with TLS 1.2 enabled there is no chance OpenSSL will successfully use CAPI. The same client cert works fine when configures in servers file so the issue is not old ciphers.
I have found this issue: https://github.com/openssl/openssl/issues/8872 Also olszomal is on target here: https://github.com/openssl/openssl/issues/5847#issuecomment-469248292 Using the very latest OpenSSL has some risks. Can you recommend a version of TortoiseSVN before upgrading to OpenSSL 1.1? Thanks, Thomas Å. -- You received this message because you are subscribed to the Google Groups "TortoiseSVN" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/tortoisesvn/dc232a13-0084-41c8-a68a-854e4e966189%40googlegroups.com.
