Apache/Subversion: SSL negotiation failed: SSL error: parse tlsext

Greg — Fri, 25 Sep 2009 23:36:23 +0000

If you are getting an error like the following when you do a large import or commit to Subversion over SSL:

Error: MKCOL of
‘/repository/!svn/wrk/{GUID}/project/trunk/folder/file.ext’
SSL negotiation failed: SSL error: parse tlsext (https://mysite.com)

try modifying your Apache server’s httpd.conf, changing the SSLProtocol line like this:

#SSLProtocol -ALL +SSLv3 +TLSv1
SSLProtocol -ALL +SSLv3

Of course this will only work if you don’t need TLSv1

(I ran into this while running Subversion 1.6.5 over Apache 2.2.13 on Windows 2003 Server)

Hope this helps!

Binding Apache and IIS both to Port 80 on Different IPs / Same NIC

Greg — Fri, 25 Sep 2009 03:39:30 +0000

If you need to run IIS 6.0 and Apache 2.2.* side-by-side on the same Windows server machine, you most likely are trying to bind apache to one IP address and IIS to another. If you have multiple IPs bound to the same NIC, this will only work if you do some tweaking to IIS’s metabase via httpcfg.exe.

The httpcfg utility is found on the installation CD in the Suppot/Tools directory in the Support.cab file (you can use WinRAR or the like to extract it).

Once you have httpcfg on your system, you force IIS to bind only to specified IP addresses with a command like:

httpcfg set iplisten -i xxx.xxx.x.x

Here’s the KB that shows in detail you how to get it done:

http://support.microsoft.com/kb/813368/EN-US/

Hope this helps!

code.commongroove.com » Apache

Apache/Subversion: SSL negotiation failed: SSL error: parse tlsext

Binding Apache and IIS both to Port 80 on Different IPs / Same NIC