<div dir="ltr">Yeah, for SSL to work the Subject of the cert must include the hostname in the CN field. So you would need a certificate with CN=<a href="http://source.ptolemy.org">source.ptolemy.org</a> in the subject field. <div>
<br></div><div>Matt</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Sun, Sep 22, 2013 at 7:56 AM, Christopher Brooks <span dir="ltr"><<a href="mailto:cxh@eecs.berkeley.edu" target="_blank">cxh@eecs.berkeley.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>Good idea, but there are problems.<br>
<br>
I set up a CNAME for <a href="http://source.ptolemy.org" target="_blank">source.ptolemy.org</a> to point to
<a href="http://repo.eecs.berkeley.edu" target="_blank">repo.eecs.berkeley.edu</a>, but when I point a browser to
<a href="https://source.ptolemy.org/svn/projects/eal/pret/" target="_blank">https://source.ptolemy.org/svn/projects/eal/pret/</a>, I get a warning
about certs.<br>
<br>
The svn command itself fails:<br>
<br>
ealmac10:~] cxh% svn co
<a href="https://source.ptolemy.org/svn/projects/eal/ptII/trunk" target="_blank">https://source.ptolemy.org/svn/projects/eal/ptII/trunk</a> ptII<br>
svn: OPTIONS of
'<a href="https://source.ptolemy.org/svn/projects/eal/ptII/trunk" target="_blank">https://source.ptolemy.org/svn/projects/eal/ptII/trunk</a>': SSL
handshake failed: SSL error code -1/1/33\<br>
6032856 (<a href="https://source.ptolemy.org" target="_blank">https://source.ptolemy.org</a>)<br>
<br>
However, using the actual address works.<br>
[ealmac10:~] cxh% svn co
<a href="https://repo.eecs.berkeley.edu/svn/projects/eal/ptII/trunk" target="_blank">https://repo.eecs.berkeley.edu/svn/projects/eal/ptII/trunk</a> ptII<br>
A ptII/bin<br>
A ptII/bin/ptlndir<br>
A ptII/ptolemy<br>
A ptII/ptolemy/domains<br>
<br>
svn+ssh access is not permitted on this repo.<br>
<br>
The same is true of the anonymous access URL
<a href="https://source.ptolemy.org/svn-anon/projects/eal/ptII/" target="_blank">https://source.ptolemy.org/svn-anon/projects/eal/ptII/</a> vs.
<a href="https://repo.eecs.berkeley.edu/svn-anon/projects/eal/ptII/" target="_blank">https://repo.eecs.berkeley.edu/svn-anon/projects/eal/ptII/</a><br>
<br>
The only solution I see would be to get <a href="http://source.ptolemy.org" target="_blank">source.ptolemy.org</a> added
to the cert and probably to the repo.eecs website itself.<br>
<br>
Any other ideas?<span class="HOEnZb"><font color="#888888"><br>
<br>
_Christopher</font></span><div><div class="h5"><br>
<br>
<br>
<br>
On 9/19/13 3:48 PM, Matt Jones wrote:<br>
</div></div></div><div><div class="h5">
<blockquote type="cite">
<div dir="ltr">Thanks.
<div><br>
</div>
<div>When you move it, how about giving it a CNAME name tied to
the service so that next time you need to move it the service
location doesn't have to be updated? Is there a way you can
keep the original hostname active as a CNAME so that anyone
with existing checkouts will continue to be able to access it?
That's why we used '<a href="http://code.kepler-project.org" target="_blank">code.kepler-project.org</a>',
a name that can travel with the SVN service as it migrates
across hosts (which we've done twice since it was created).</div>
<div><br>
</div>
<div>Matt </div>
</div>
<div class="gmail_extra"><br>
<br>
<div class="gmail_quote">On Thu, Sep 19, 2013 at 1:13 PM,
Christopher Brooks <span dir="ltr"><<a href="mailto:cxh@eecs.berkeley.edu" target="_blank">cxh@eecs.berkeley.edu</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">The
machine that currently has the ptII repository will be
retired soon. I want to move the repository to a new
machine.<br>
<br>
I'll be doing the move on Sunday, Oct 22.<br>
<br>
After the move is done, I'll update Kepler so that the build
works.<span><font color="#888888"><br>
<br>
_Christopher<br>
<br>
-- <br>
Christopher Brooks, PMP University
of California<br>
Academic Program Manager & Software Engineer US
Mail: 337 Cory Hall<br>
CHESS/iCyPhy/Ptolemy/TerraSwarm Berkeley,
CA 94720-1774<br>
<a href="mailto:cxh@eecs.berkeley.edu" target="_blank">cxh@eecs.berkeley.edu</a>,
<a href="tel:707.332.0670" value="+17073320670" target="_blank">707.332.0670</a>
(Office: 545Q Cory)<br>
<br>
_______________________________________________<br>
Kepler-dev mailing list<br>
<a href="mailto:Kepler-dev@kepler-project.org" target="_blank">Kepler-dev@kepler-project.org</a><br>
<a href="http://lists.nceas.ucsb.edu/kepler/mailman/listinfo/kepler-dev" target="_blank">http://lists.nceas.ucsb.edu/kepler/mailman/listinfo/kepler-dev</a><br>
</font></span></blockquote>
</div>
<br>
</div>
</blockquote>
<br>
<br>
<pre cols="72">--
Christopher Brooks, PMP University of California
Academic Program Manager & Software Engineer US Mail: 337 Cory Hall
CHESS/iCyPhy/Ptolemy/TerraSwarm Berkeley, CA 94720-1774
<a href="mailto:cxh@eecs.berkeley.edu" target="_blank">cxh@eecs.berkeley.edu</a>, <a href="tel:707.332.0670" value="+17073320670" target="_blank">707.332.0670</a> (Office: 545Q Cory)
</pre>
</div></div></div>
</blockquote></div><br></div>