[svk-devel] Error on 'svk sync -s'

[Rolf Schäuble]

Hi Daniel,

I did further investigation, and while I hunted down and fixed  
another bug (I will report it in another mail, with the title  
"Problem in SVN::Mirror::Ra.pm", in case you're interested).
It is not a problem with openssl. Instead, it comes down to SVK  
sending a log request in the range -1:-1, which either:
- different versions of the client lib handle differently
- or different versions of the server react differently on.

Regards
Rolf

Am 25.10.2006 um 15:55 schrieb Daniel J. Luke:


> On Oct 25, 2006, at 3:39 AM, Rolf Schäuble wrote:
>
>>> I think it might be due to a change in the latest openssl (the  
>>> one I mentioned on the macports mailing list).
>>>
>>>
>> Could you give me link? I searched the archives for the last few  
>> month (manually, either they don't have a search for the list, or  
>> I didn't find it), and I could only find one single mail (without  
>> any answers).
>>
>
> http://lists.macosforge.org/pipermail/macports-dev/2006-September/ 
> 000066.html
>
> I haven't done the appropriate work to confirm that the particular  
> change I mentioned is actually what causes the problem, but I am  
> suspicious of it.
>
>
>> In case this is useful: My OSX runs openssl 0.9.8d, my Linux runs  
>> 0.9.8.a. I will check what my PC in work is running. Maybe that's  
>> really the problem.
>>
>
> It's very possible.
>
> If you do 'openssl s_client -connect server:port -tls1' you can see  
> if you generate the same error message  
> (routines:SSL3_READ_BYTES:sslv3 alert bad record mac:s3_pkt.c: 
> 1057:SSL alert number 20) that I see connecting to MacPorts  
> subversion (and on Mac OS X, you can use the apple-provided openssl  
> to test as well).
>
> You may have to test a few times to get the error, since it doesn't  
> seem 100% reproducible.
>
>
>>> If it's the same issue we see with the macports subversion  
>>> repository, you can just re-try a bunch of times and it will  
>>> eventually work (and you can replicate the problem by using  
>>> 'openssl s_client' to connect to the problematic server).
>>>
>>>
>> Thanks. I will try that later today.
>>
>
> --
> Daniel J. Luke
> +========================================================+
> | *---------------- dluke at geeklair.net ----------------* |
> | *-------------- http://www.geeklair.net -------------* |
> +========================================================+
> |   Opinions expressed are mine and do not necessarily   |
> |          reflect the opinions of my employer.          |
> +========================================================+
>
>
> _______________________________________________
> svk-devel mailing list
> svk-devel at bestpractical.com
> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/svk-devel
>