[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Secure URI replacement for svn://anonscm.debian.org ?



Hi,

lintian.debian.org accuses package libburn of

  [I] vcs-field-uses-insecure-uri
    vcs-browser http://anonscm.debian.org/viewvc/pkg-libburnia/trunk/libburn/
    vcs-svn svn://anonscm.debian.org/pkg-libburnia/trunk/libburn/

The first URI can simply be changed to https:, but the svn: URI makes
me riddle.

Simply replacing svn: by https: does not work
  $ svn co https://anonscm.debian.org/pkg-libburnia/trunk/libburn/
  svn: E170013: Unable to connect to a repository at URL 'https://anonscm.debian.org/pkg-libburnia/trunk/libburn'
  ...

I myself address the SVN by
  svn+ssh://svn.debian.org/svn/pkg-libburnia/trunk
because i need commit access.

For a test of anonymous checkout i set up a new user by "adduser" with
no special permissions and no relation to the SSH software of Debian
servers.
The insecure URI works just fine for this user:
  $ svn co svn://anonscm.debian.org/pkg-libburnia/trunk/libburn/
  ...
  Checked out revision 390.

But svn+ssh: yields error:
  $ svn co svn+ssh://svn.debian.org/svn/pkg-libburnia/trunk/ibburn/
  ...
  Are you sure you want to continue connecting (yes/no)? yes
  svn: E170013: Unable to connect to a repository at URL 'svn+ssh://svn.debian.org/svn/pkg-libburnia/trunk/libburn'
  ...

Same with the anonscm.debian.org hostname:
  svn: E170013: Unable to connect to a repository at URL 'svn+ssh://anonscm.debian.org/pkg-libburnia/trunk/libburn'


Have a nice day :)

Thomas


Reply to: