Hello,

I am running subversion on a Debian Squeeze system with Apache2 and mod_dav for viewing the contents with a webbrowser.

I want to enforce the usage of TLS, so that the login data and the SVN contents cannot be read from the connection.

I have tried following:

<Location /svn>
   DAV svn
   SVNParentPath /daten/subversion/

   # our access control policy
   AuthzSVNAccessFile /daten/subversion/access_control

   # try anonymous access first, resort to real
   # authentication if necessary.
   Satisfy Any
   Require valid-user

   # how to authenticate a user
   AuthType Basic
   AuthName "Subversion repository"
   AuthUserFile /daten/subversion/.htpasswd

   # Test
   SSLRequireSSL

   RewriteEngine On
   RewriteCond %{SERVER_PORT} !443
   RewriteRule ^svn/(.)$ https://www.viathinksoft.de/svn/$1 [R,L]
</Location>

at file /etc/apache2/conf.d/subversion.conf

Alas, this does not work. There is no redirect and there is still a HTTP request working at /svn/(projectname)/(somefolder) .

This SSL-enforce-policy should work for - viewing the contents with webbrowser - retrieve contents with TurtoiseSVN client - committing contents with TurtoiseSVN client

Can you please help me?

Regards Daniel Marschall