| |||||||||||||
|
| |||||||||||||
Why not upgrade CVS? Subversion, GNU Arch, etc.Why not upgrade CVS? Subversion, GNU Arch, etc.Posted Jun 2, 2004 23:21 UTC (Wed) by piman (subscriber, #8957)In reply to: Why not upgrade CVS? Subversion, GNU Arch, etc. by mmarsh Parent article: Arch for CVS Users (Linux Journal) I'm no expert in PKI (or Apache), but I think Apache can already authenticate like that. I know that with Apache (or svnserve) you can easily let users define their own authorization schemes, which don't rely on local logins.
(Log in to post comments)
Why not upgrade CVS? Subversion, GNU Arch, etc. Posted Jun 3, 2004 0:04 UTC (Thu) by mmarsh (subscriber, #17029) [Link] Apache certainly can, but that's kind of a heavyweight solution for a CM server. svnserve has a similar feature to pserver, except that passwords are never sent over the wire, but are used in a cryptographic hash. Unfortunately, the passwords are stored in cleartext. I just can't bring myself to use anything that stores cleartext passwords. Given how (relatively) easy OpenSSL is to use, it's surprising that there only seems to be one CM that takes advantage of it (not counting Subversion+Apache).Of course, the right thing to do would be to offer to help Subversion add SSL/TLS to the stand-alone server.
|
|
||||||||||||