This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 86865 - "Accept permanently" certificate doesn't work
Summary: "Accept permanently" certificate doesn't work
Status: RESOLVED FIXED
Alias: None
Product: versioncontrol
Classification: Unclassified
Component: Subversion (show other bugs)
Version: 5.x
Hardware: Macintosh Mac OS X
: P3 blocker (vote)
Assignee: issues@versioncontrol
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-10-10 15:17 UTC by fabriziogiudici
Modified: 2006-11-24 19:00 UTC (History)
0 users

See Also:
Issue Type: DEFECT
Exception Reporter:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description fabriziogiudici 2006-10-10 15:17:14 UTC
Refreshing my project (which is checked out at bluemarine.dev.java.net) causes
subversion to infinitely open a pop up to warn that the certificate is not
signed by a root certification auth (a common problem with many web certs).

Unfortunately hitting "Accept permanently" (or even temporaneusly) doesn't stop
the sequence of pop ups. I've also checked if there was one pop up for each
module of my project (53 modules), but I'm at the 60th pop up, so it looks
really an infinite sequence.

PS I suppose a workaround can be done with svn by adding the missing root
certification auth.
Comment 1 Peter Pis 2006-10-10 15:29:47 UTC
Similar issue has been fixed recently. So I would like to ask you for your build
of *subversion* module. (from main menu invoke "Tools | Options" - in Versioning
item)
Comment 2 fabriziogiudici 2006-10-10 15:32:50 UTC
It's 1.1.19.42.1.1
Comment 3 Peter Pis 2006-10-10 16:03:11 UTC
Could you please send us:

1. accepted cert. file generated by subversion module (it's placed in netbeans
"user dir"/config/svn/config/auth/svn.ssl.server/ ) - while it fails there is an
output generated into "Output" tab (CTRL+4) -  attach it too please.

2. then try to accept the certificate by subversion command line client (please
at first erase content of "<userhome>/.subversion/auth/svn.ssl.server/" folder)
- file will be generated again, please send this file too.

3. As a workaround you can copy content of system subversion
"<userhome>/.subversion/auth/svn.ssl.server/" content into netbeans subversion
"user dir"/config/svn/config/auth/svn.ssl.server/

If you don't want to post your data here, you can send them to my account only.
Comment 4 fabriziogiudici 2006-10-11 19:14:43 UTC
1. accepted cert. 

[Mistral:~/.netbeans/5.5rc1] fritz% cd config/svn/config/auth/svn.ssl.server/
[Mistral:config/auth/svn.ssl.server] fritz% ll
total 8
drwxr-xr-x   3 fritz  fritz   102 Oct 10 16:08 .
drwx------   5 fritz  fritz   170 Oct 10 11:10 ..
-rw-r--r--   1 fritz  fritz  1929 Oct 10 16:09 920cf5a16e6935f56ec374107f0d45e5
[Mistral:config/auth/svn.ssl.server] fritz% cat 920cf5a16e6935f56ec374107f0d45e5 
K 10
ascii_cert
V 1820
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
K 8
failures
V 1
8
K 15
svn:realmstring
V 35
https://bluemarine.dev.java.net:443
END
Comment 5 fabriziogiudici 2006-10-11 19:20:40 UTC
2.

[Mistral:~/.subversion/auth/svn.ssl.server] fritz% cat
920cf5a16e6935f56ec374107f0d45e5 
K 10
ascii_cert
V 1820
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
K 8
failures
V 1
8
K 15
svn:realmstring
V 35
https://bluemarine.dev.java.net:443
END
Comment 6 fabriziogiudici 2006-10-11 19:22:08 UTC
Yep, they contain the same stuff

[Mistral:~/.subversion/auth/svn.ssl.server] fritz% diff
920cf5a16e6935f56ec374107f0d45e5
$HOME/.netbeans/5.5rc1/config/svn/config/auth/svn.ssl.server/920cf5a16e6935f56ec374107f0d45e5

[Mistral:~/.subversion/auth/svn.ssl.server] fritz% 
Comment 7 fabriziogiudici 2006-10-11 19:30:36 UTC
After the previous step, since the file were equal, I'd have bet that the
workaround wouldn't have worked.

On the contrary it worked. ?!?!?!

:-)
Comment 8 Tomas Stupka 2006-10-12 08:35:22 UTC
just to be sure:
- coud you please again try to remove the certificate file from your netbeans
home and see if it works or not.
- if not, could you then attach (not paste, please) both files - from the svn
config dir, and nb home dir

thanks 
Comment 9 fabriziogiudici 2006-10-13 09:15:27 UTC
Sorry for the delay, I'll repeat the test as you asked asap...
Comment 10 Tomas Stupka 2006-11-23 15:39:59 UTC
hi!

are you still able to reproduce the issue with the 5.5 release build?

Comment 11 fabriziogiudici 2006-11-24 00:21:04 UTC
Oh my God, 40 days passed! Sorry.

I tested this sequence:

1. remove all the certs from NetBeans with 
rm .netbeans/5.5/config/svn/config/auth/svn.ssl.server/*

2. Run NetBeans and connect with existing repositories.

Nothing was asked and the certificates were re-created in the repository. The
bug is no more here, even though I don't understand why now NetBeans didn't
asked me about untrusted certificates?!? Unless in the meantime they changed
certificates at java.net?

Comment 12 Tomas Stupka 2006-11-24 08:19:29 UTC
thanks.

i will then close this issue as fixed.

if you already have a certificate in ~/.subersion then netbeans copies it into
it's userdir, so probably thats why it didn't ask.
Comment 13 fabriziogiudici 2006-11-24 19:00:00 UTC
That's fine. I also tested it with a fresh installation of Windows, with
subversion never run (that is, there were no certificates locally). It worked
without problems, asking about the accepting policy just once.