[cvsnt] Re: Linux Setup w/SSL (sserver) Tuturial?

Fri Mar 18 23:12:34 GMT 2005

> Jason Williard wrote:
> > Does anyone know of any good tutorials on the web, or perhaps in a book,
> > that explains how to setup cvsnt-2.x with SSL (sserver) on a Linux
> machine?
> > I have been having so many difficulties, it just seems that it would be
> good
> > to start from scratch.
> 
> The easiest:
> 
> Compile (configure/make/make install)
> Make a self-signed certificate, or get one from verisign etc.
> Set CertificateFile and CertificateKeyFile in /etc/cvsnt/PServer
> 
> Tony

I did this, again, as I had 2 times before.  As before, pserver works but
sserver does not.  I find it peculiar when I attempt to connect locally, I
get an error saying "the :sserver: access method is not installed on this
system".

I reviewed the config.log and found that OpenSSL was found and sserver was
set to be installed.  As well, the sserver libraries exist in
/usr/local/lib/cvsnt.  This would make me believe that sserver is installed,
but I am unable to get it to work.

When I attempt to connect via TortoiseCVS, I still get the following error
when connecting on port 2401 or 8003:
cvs.exe checkout: SSL connection failed (-1): error:140770FC:SSL
routines:SSL23_GET_SERVER_HELLO:unknown protocol
cvs.exe [checkout aborted]: Connection to server failed

I am not sure if it is an issue, but here is how I, currently, have the
xinetd service setup:

service cvssserver
{
        disable         = no
        socket_type     = stream
        port            = 8003
        protocol        = tcp
        wait            = no
        user            = root
        group           = root
        log_type        = FILE /var/log/cvspserver
        env             = 'HOME=/cvs'
        server          = /usr/local/bin/cvs
        server_args     = -f --encrypt authserver
}

Any more assistance would be appreciated.

Thank You,
Jason Williard