[cvsnt] Re: :sserver: on Linux

[torsten at tiscali.dk]

Tony Hoyle wrote:

>> Torsten Martinsen wrote:
>>
>>> You're probably missing the certificates from the setup.  You also 
>>> need the ca.pem certificate file on the client of course.
>> 
>> 
>> Any pointers to doc as how to do this?
>>
>ca.pem is installed by the installer unless you told it not to.  The setup
is
>standard openssl public/private key files... on Windows of course there's
>the control panel to do that.  On Linux it's just generic system admin
>stuff, you generate a selfsign certificate using ca.pl, then point the
>config file to it. 
>See http://www.mkssoftware.com/docs/man1/openssl_CA.pl.1.asp

I generated a certificate using 'CA.pl -newcert' and copied the newreq.pem
file to /etc/cvsnt.

My /etc/cvsnt/PServer file contains

    CertificateFile=/etc/cvsnt/newreq.pem
    PrivateKeyFile=/etc/cvsnt/newreq.pem

I have verified that my client works with a standard installation of CVSNT
2.0.34 on an NT4 box. But with the Linux server, I still get

    cvs checkout: SSL conneciton failed: error:00000000:lib(0):func(0):reason(0)
    cvs [checkout aborted]: Connection to server failed

-Torsten