I recently stumbled across a problem with Mac OS X Leopard’s “svn” (Subversion) client which doesn’t know about common root CAs (such as Thawte in my case,) even tho they are in the system keychain (which you can view using “Keychain Access.”)<\/p>\n
It turned out that it only uses the certificates it find in The strange thing is that the Thawte certificate in fact is already present on Mac OS, but it’s inside I extracted the certificate from Voil\u00e0! Now I could connect to our Subversion repository without receiving a warning like the following:<\/p>\n I recently stumbled across a problem with Mac OS X Leopard’s “svn” (Subversion) client which doesn’t know about common root CAs (such as Thawte in my case,) even tho they are in the system keychain (which you can view using “Keychain Access.”) It turned out that it only uses the certificates it find in \/System\/Library\/OpenSSL\/certs. […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,27],"tags":[38,37,36,35],"class_list":["post-73","post","type-post","status-publish","format-standard","hentry","category-computers","category-mac-computers","tag-ca","tag-cert","tag-ssl","tag-svn"],"_links":{"self":[{"href":"https:\/\/bergs.biz\/blog\/wp-json\/wp\/v2\/posts\/73","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bergs.biz\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bergs.biz\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bergs.biz\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bergs.biz\/blog\/wp-json\/wp\/v2\/comments?post=73"}],"version-history":[{"count":0,"href":"https:\/\/bergs.biz\/blog\/wp-json\/wp\/v2\/posts\/73\/revisions"}],"wp:attachment":[{"href":"https:\/\/bergs.biz\/blog\/wp-json\/wp\/v2\/media?parent=73"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bergs.biz\/blog\/wp-json\/wp\/v2\/categories?post=73"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bergs.biz\/blog\/wp-json\/wp\/v2\/tags?post=73"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}\/System\/Library\/OpenSSL\/certs<\/code>.<\/p>\n\/usr\/share\/curl\/curl-ca-bundle.crt<\/code>, which svn doesn’t know about. So what I did to make it work is the following:<\/p>\n\/usr\/share\/curl\/curl-ca-bundle.crt<\/code> and copied it to \/tmp\/thawte.pem<\/code>. I then determined the hash of the certificate as follows and created a link to the original certificate bundle (as superuser!):<\/p>\n#openssl x509 -in \/tmp\/thawte.pem -noout -hash\r\nddc328ff\r\n#ln -s \/usr\/share\/curl\/curl-ca-bundle.crt \/System\/Library\/OpenSSL\/certs\/ddc328ff.0\r\n<\/pre>\n
Error validating server certificate for 'https:\/\/our.repos.de:443':\r\n- The certificate is not issued by a trusted authority. Use the\r\nfingerprint to validate the certificate manually!\r\n<\/pre>\n","protected":false},"excerpt":{"rendered":"