“https://18.0.6.200/svn/xxx”: SSL handshake failed 错误解决

svn: 方法 OPTIONS 失败于 “https://18.0.6.200/svn/xxx”: SSL handshake failed: SSL 错误：在证书中检测到违规的密钥用法。

今天同事登录SVN服务器时提示密钥违规错误，在网上查了一下原因，原来是Windows下的证书在Linux下无法正确识别的问题。

解决方法如下： http://www.visualsvn.com/support/topic/00056/

 

 It's not recommended to use a self-signed certificate in a production environment. We advise to use a certificate issued by your domain or a third-party certificate authority instead of a self-signed one.

If you have to use a self-signed certificate please follow the instruction to generate a cerificate without specifying 'Key Usage' extension:

1. Add the following registry value to the Windows registry:

   • for 32-bit system:

     [HKEY_LOCAL_MACHINE\SOFTWARE\VisualSVN\VisualSVN Server]
     "CreateGnuTLSCompatibleCertificate"=dword:00000001
           

   • for 64-bit system:

     [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\VisualSVN\VisualSVN Server]
     "CreateGnuTLSCompatibleCertificate"=dword:00000001
           

2. Start VisualSVN Server Manager.
3. Go to Action | Properties | Certificate.
4. Click Change certificate... and follow the wizard instructions to generate a new self-signed certificate.

The certificate will be generated without the 'Key Usage' extension and will be compatible both with GnuTLS and OpenSSL.