0

~/.subversion/servers 配置文件是否有任何初始内容?我试图查看源代码,但几乎不可能弄清楚......:/

这是迄今为止我发现的唯一提示。但无论如何,它并没有真正解决问题。 http://svnbook.red-bean.com/en/1.7/svn.advanced.confarea.html#svn.advanced.confarea.windows-registry.ex-1

我的问题是我想通过附加到 ~/.subversion/servers 文件“ssl-trust-default-ca = no”来解决没有“证书验证错误:使用不安全算法签名”错误。

到目前为止它不起作用,因为我只是使用终端“vi”编辑器以某种方式删除了内容。服务器文件中的行本身和单独生成另一个错误:“~/.subversion/servers:2: Section header expected”

到目前为止,我所做的是添加从我上面发布的链接中获取的一些内容。这导致 ~/.subversion/servers 文件为:"

    #Servers
    #
    #The servers file contains Subversion configuration options related to the network layers. There are two special sections in this file—[groups] and [global]. The [groups] section is essentially a cross-reference table. The keys in this section are the names of other sections in the file; their values are globs—textual tokens that possibly contain wildcard characters—that are compared against the hostnames of the machine to which Subversion requests are sent.
    #
    [groups]
    #beanie-babies = *.red-bean.com
    #collabnet = svn.collab.net
    #
    [beanie-babies]
    #…
    #
    [collabnet]
    #…
    #When Subversion is used over a network, it attempts to match the name of the server it is trying to reach with a group name under the [groups] section. If a match is made, Subversion then looks for a section in the servers file whose name is the matched group's name. From that section, it reads the actual network configuration settings.
    #
    #The [global] section contains the settings that are meant for all of the servers not matched by one of the globs under the [groups] section. The options available in this section are exactly the same as those that are valid for the other server sections in the file (except, of course, the special [groups] section), and are as follows:
    #
    #http-auth-types
    #This is a semicolon-delimited list of HTTP authentication types which the client will deem acceptable. Valid types are basic, digest, and negotiate, with the default behavior being acceptance of any these authentication types. A client which insists on not transmitting authentication credentials in cleartext might, for example, be configured such that the value of this option is digest;negotiate—omitting basic from the list. (Note that this setting is only honored by Subversion's Neon-based HTTP provider module.)
    #
    #http-compression
    #This specifies whether Subversion should attempt to compress network requests made to DAV-ready servers. The default value is yes (though compression will occur only if that capability is compiled into the network layer). Set this to no to disable compression, such as when debugging network transmissions.
    #
    #http-library
    #Subversion provides a pair of repository access modules that understand its WebDAV network protocol. The original one, which shipped with Subversion 1.0, is libsvn_ra_neon (though back then it was called libsvn_ra_dav). Newer Subversion versions also provide libsvn_ra_serf, which uses a different underlying implementation and aims to support some of the newer HTTP concepts.
    #
    #At this point, libsvn_ra_serf is still considered experimental, though it appears to work in the common cases quite well. To encourage experimentation, Subversion provides the http-library runtime configuration option to allow users to specify (generally, or in a per-server-group fashion) which WebDAV access module they'd prefer to use—neon or serf.
    #
    #http-proxy-exceptions
    #This specifies a comma-separated list of patterns for repository hostnames that should be accessed directly, without using the proxy machine. The pattern syntax is the same as is used in the Unix shell for filenames. A repository hostname matching any of these patterns will not be proxied.
    #
    #http-proxy-host
    #This specifies the hostname of the proxy computer through which your HTTP-based Subversion requests must pass. It defaults to an empty value, which means that Subversion will not attempt to route HTTP requests through a proxy computer, and will instead attempt to contact the destination machine directly.
    #
    #http-proxy-password
    #This specifies the password to supply to the proxy machine. It defaults to an empty value.
    #
    #http-proxy-port
    #This specifies the port number on the proxy host to use. It defaults to an empty value.
    #
    #http-proxy-username
    #This specifies the username to supply to the proxy machine. It defaults to an empty value.
    #
    #http-timeout
    #This specifies the amount of time, in seconds, to wait for a server response. If you experience problems with a slow network connection causing Subversion operations to time out, you should increase the value of this option. The default value is 0, which instructs the underlying HTTP library, Neon, to use its default timeout setting.
    #
    #neon-debug-mask
    #This is an integer mask that the underlying HTTP library, Neon, uses for choosing what type of debugging output to yield. The default value is 0, which will silence all debugging output. For more information about how Subversion makes use of Neon, see Chapter 8, Embedding Subversion.
    #
    #ssl-authority-files
    #This is a semicolon-delimited list of paths to files containing certificates of the certificate authorities (or CAs) that are accepted by the Subversion client when accessing the repository over HTTPS.
    #
    #ssl-client-cert-file
    #If a host (or set of hosts) requires an SSL client certificate, you'll normally be prompted for a path to your certificate. By setting this variable to that same path, Subversion will be able to find your client certificate automatically without prompting you. There's no standard place to store your certificate on disk; Subversion will grab it from any path you specify.
    #
    #ssl-client-cert-password
    #If your SSL client certificate file is encrypted by a passphrase, Subversion will prompt you for the passphrase whenever the certificate is used. If you find this annoying (and don't mind storing the password in the servers file), you can set this variable to the certificate's passphrase. You won't be prompted anymore.
    #
    #ssl-pkcs11-provider
    #The value of this option is the name of the PKCS#11 provider from which an SSL client certificate will be drawn (if the server asks for one). This setting is only honored by Subversion's Neon-based HTTP provider module.
    #
    ssl-trust-default-ca = no
    #Set this variable to yes if you want Subversion to automatically trust the set of default CAs that ship with OpenSSL.
    #
    #store-auth-creds
    #This setting is the same as store-passwords, except that it enables or disables on-disk caching of all authentication information: usernames, passwords, server certificates, and any other types of cacheable credentials.
    #
    #store-passwords
    #This instructs Subversion to cache, or not to cache, passwords that are supplied by the user in response to server authentication challenges. The default value is yes. Set this to no to disable this on-disk password caching. You can override this option for a single instance of the svn command using the --no-auth-cache command-line parameter (for those subcommands that support it). For more information regarding that, see the section called “Caching credentials”. Note that regardless of how this option is configured, Subversion will not store passwords in plaintext unless the store-plaintext-passwords option is also set to yes.
    #
    #store-plaintext-passwords
    #This variable is only important on UNIX-like systems. It controls what the Subversion client does in case the password for the current authentication realm can only be cached on disk in unencrypted form, in the ~/.subversion/auth/ caching area. You can set it to yes or no to enable or disable caching of passwords in unencrypted form, respectively. The default setting is ask, which causes the Subversion client to ask you each time a new password is about to be added to the ~/.subversion/auth/ caching area.
    #
    #store-ssl-client-cert-pp
    #This option controls whether Subversion will cache SSL client certificate passphrases provided by the user. Its value defaults to yes. Set this to no to disable this passphrase caching.
    #
    #store-ssl-client-cert-pp-plaintext
    #This option controls whether Subversion, when attempting to cache an SSL client certificate passphrase, will be allowed to do so using its on-disk plaintext storage mechanism. The default value of this option is ask, which causes the Subversion client to ask you each time a new client certificate passphrase is about to be added to the ~/.subversion/auth/ caching area. Set this option's value to yes or no to indicate your preference and avoid related prompts.

"

[我非常感谢stackoverflow,我的浏览器在写作时崩溃了两次,但消息不知何故恢复了!天哪,它是这个虚拟时代的有用网站之一,时间已经过去了,谢谢]

啊,是的,到目前为止帮助我解决证书错误的原因是来自此页面: http: //linux-knowledgebase.com/en/Tip_of_the_day/December/Certificate_verification_error%253A_signed_using_insecure_algorithm

4

1 回答 1

4

如果你想要默认的 .subversion 目录,重命名你当前的 .subversion 目录,运行一个 svn 命令,它会为你创建一个新的。例如:

$ mv .subversion .subversion-
$ svn info
svn: '.' is not a working copy
$ ls -dl .subversion*
drwxr-xr-x 3 vobadm g268 4096 Jun 19 15:12 .subversion
drwxr-xr-x 3 vobadm g268 4096 Jun 19 15:12 .subversion-

然后您可以尝试在新目录中重新进行更改,旧文件仍然可以参考。我认为这比尝试从头开始重新构建该配置文件更容易。

这样做的另一个好处是,如果在创建 .subversion 目录后升级了 Subversion,则任何新设置都将列在(新创建的)默认配置文件中。

于 2012-06-19T22:19:47.087 回答