Run SVN commands with self signed SSL cert

Question

I am running the following command:

svn info --non-interactive --trust-server-cert --no-auth-cache --xml "https://ommited/svn/YAMS"

Unfortunately, I am getting the following error:

?xml version="1.0" encoding="UTF-8"?>
<info>
svn: E175002: Unable to connect to a repository at URL 'https://ommited/svn/YAMS'
svn: E175002: OPTIONS of 'https://ommited/svn/YAMS': Server certificat
e verification failed: certificate issued for a different hostname, issuer is no
t trusted (https://ommited)

I thought if I put --non-interactive --trust-server-cert, it would ignore the self signed certificate problem. Am I doing something wrong here?

Answer 1

Your hostname does not match. Re-issue your certificate with correct hostname.

One of the odds in svn cmd is that --trust-server-cert will trust any CA, however it still checks for valid hostname and if cert is expired.

So use correct hostname to solve your problem.

And yes, this does not make sense :-)

See here for more information from svn mailinglist

Answer 2

run the following php code, to accept the certificate, very much like when you'll do manually, using command line (where you press 'p' to accept the certificate permanently):

<?php
header('Content-Type: text/plain; charset=UTF-8');
print( shell_exec('echo p | svn log --limit 4 c:/work/trunk  2>&1') );
?>

run it once, the cert. will be accepted, and now - run it 'as usual' (no need echo p anymore)

<?php
header('Content-Type: text/plain; charset=UTF-8');
print( shell_exec('svn log --limit 4 c:/work/trunk  2>&1') );
?>

Note the 2>&1 at the end. I recommend add it too. this way you can see the err-output (if having any).

credit goes to subversion-when-trust-server-cert-isnt-enough