Arch Linux

millz

Member

Registered: 2013-12-29

Posts: 30

[SOLVED] SSLv3 / subversion / SVN

Hey Guys,

after updating my arch I got an issue mainly related to ssl3. This issue occures by using firefox and eclipse with svn. It is most important in the context of eclipse and svn. I know, that ssl3 should be disabled. This will be done asap.

Situation before update:
I've eclipse (binary, no installation) running with javahl and subversion to keep my project up to date. This is working well for last the year, though.

It should be outlined, that updates are performed weekly. So this issue is probably related to some changes during the last week,,,

Situation after update:
I click on Team / Update to HEAD at the root of my project and getting faced with this error:

update /path/to/my/project/06_Development -r HEAD --force
    APR does not understand this error code
svn: Unable to connect to a repository at URL 'https://svn.domain.de/svn/project'
svn: Fehler beim Ausführen des Kontextes: APR does not understand this error code

After googling for a while, I found out that this issue is probably somehow SSLv3 related. Checking the same URL on my firefox, I see this.

Unable to Connect Securely

Firefox cannot guarantee the safety of your data on svn.domain.de because it uses SSLv3, a broken security protocol.
Advanced info: ssl_error_no_cypher_overlap

Chromium is showing something similiar.

Furthermore I should mention, that my colleagues (using Windows or Ubuntu) still can update and commit to the same svn. Everything is working fine. Additionally you should now, that this issue occures on two different computers (notebook, workingstation).

I've no clue how to solve this issue. Maybe you can give me some advice?

Thanks in advance!
millz

Last edited by millz (2015-01-28 14:09:35)

alorl

Member

Registered: 2013-04-19

Posts: 1

Re: [SOLVED] SSLv3 / subversion / SVN

I've met the same issue and discovered a solution. Downgrade a serf package to a 1.3.7 version

cd /var/cache/pacman/pkg/
sudo  pacman -U serf-1.3.7-1-x86_64.pkg.tar.xz

and svn will work again as expected.

You can also disable upgrading a package serf.

IgnorePkg=serf

in /etc/pacman.conf

millz

Member

Registered: 2013-12-29

Posts: 30

Re: [SOLVED] SSLv3 / subversion / SVN

Hey alorl,

thank you very much for your hint!

I've met the same issue and discovered a solution. Downgrade a serf package to a 1.3.7 version

cd /var/cache/pacman/pkg/
sudo  pacman -U serf-1.3.7-1-x86_64.pkg.tar.xz

and svn will work again as expected.

You can also disable upgrading a package serf.

IgnorePkg=serf

in /etc/pacman.conf

Works well for me!!

All the best.