Exception: An error occurred when running svnrdump and no exploitable dump file has been generated.
Closed, MigratedEdits Locked
Actions

Assigned To

Authored By

	posenato
	Jan 9 2021, 6:50 PM

Description

Hi everyone,
I would like to submit the following error that I obtain when I try to save an image of an SVN repository.

Short history:

I add a saving request at https://archive.softwareheritage.org/save/ on 28/12/2020, 20:03:43.
The repository is located at https://profs.scienze.univr.it/posenato/svn/sw/CSTNU. It is managed by an SVN 1.10.2 server.
The request was approved, but the first dump status was:

Loading failure, updating to `partial` status 
Exception: An error occurred when running svnrdump and no exploitable dump file has been generated.

To test my system, I made a manual svnrdump in an external machine and I verified that svnrdump works successfully:

/tmp$ svnrdump dump https://profs.scienze.univr.it/posenato/svn/sw/CSTNU > dump
* Dumped revision 0.
...
* Dumped revision 522.

I tried to make a 'Save again' on 08/01/2021, 11:05:47, but the result was the same.

I would ask you if it is possible to have more details about the error to fix it (if it depends on the settings of our servers).

Thanks.

Roberto Posenato

Event Timeline

posenato created this task.Jan 9 2021, 6:50 PM

posenato created this object in space S1 Public.

posenato created this object with visibility "All Users".

zack triaged this task as High priority.Jan 9 2021, 7:46 PM

zack changed the visibility from "All Users" to "Public (No Login Required)".

It seems there is an issue with the SVN server SSL certificate, the following errors are reported when running svnrdump:

svnrdump: E170013: Unable to connect to a repository at URL 'https://profs.scienze.univr.it/posenato/svn/sw/CSTNU'
svnrdump: E230001: Server SSL certificate verification failed: issuer is not trusted

This could be mitigated by passing the following options to svnrdump dump: --trust-server-cert-failures=unknown-ca --non-interactive

More details about the untrusted certificat:

$ openssl s_client -connect profs.scienze.univr.it:443
CONNECTED(00000003)
depth=0 C = IT, L = Verona, O = Universit\C3\A0 degli Studi di Verona, CN = profs.scienze.univr.it
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 C = IT, L = Verona, O = Universit\C3\A0 degli Studi di Verona, CN = profs.scienze.univr.it
verify error:num=21:unable to verify the first certificate
verify return:1
depth=0 C = IT, L = Verona, O = Universit\C3\A0 degli Studi di Verona, CN = profs.scienze.univr.it
verify return:1
---
Certificate chain
 0 s:C = IT, L = Verona, O = Universit\C3\A0 degli Studi di Verona, CN = profs.scienze.univr.it
   i:C = NL, ST = Noord-Holland, L = Amsterdam, O = TERENA, CN = TERENA SSL CA 3
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIHwjCCBqqgAwIBAgIQD3MM6wqD/0i+E2vxQfU45DANBgkqhkiG9w0BAQsFADBk
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg
Q0EgMzAeFw0xOTEwMTAwMDAwMDBaFw0yMTEwMTQxMjAwMDBaMGsxCzAJBgNVBAYT
AklUMQ8wDQYDVQQHEwZWZXJvbmExKjAoBgNVBAoMIVVuaXZlcnNpdMOgIGRlZ2xp
IFN0dWRpIGRpIFZlcm9uYTEfMB0GA1UEAxMWcHJvZnMuc2NpZW56ZS51bml2ci5p
dDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANEoCO4em4xCKMWUAZiP
VjDvCW6OxDFHc4jeAdgqf4B5sBY4pk8LkMsxzj3tEZ7D5yFtuN03opIEPUigmv3I
yUDCjIw+O/l9rdYLkdgnIuT59v2CzCUCOMBXt67t3Q2uBsFi7Xts1LTvWow0hj4N
ctM77MlLP2DdBgnwgLRnHbJLvQczRNC5FLhpUBoGJibkv82jqECFv9SsqWdOI4/Y
E2HJmOYcXNi2B7MCxqMtoS78hDpa02PSEVUtK516knSbmdKZkET0tLNNQ7xYIxsV
xoSM3lg9Jcz7WVbJKStV+ZnVsgLtsR2Q1kJ5lafVHNZa08z+WxY9h0YeCexT1+Vm
RRqHsHsS4ELr9FzeS/IDEApqdJIvHBPNlo0RduPCsj77NSkMyYaVN13dM5LTlHFO
xPo49+ubMkfkvmjKPMBNuimkMRQYqdV6sAMFhWxJVkpSVTAzuXQ3cv/9vtN+FWus
htE2JB31v8QQbD7id/HjDd3aGIIVG/S/BGs1OwaALFX3t3Zgm5ovBldhbjWsMAiW
DzlRl7unVoytUjiWxJA4Httuh+nn1RpAUHfZdgj59g1KtcLW3YPCxQBAmpElB9Xz
Fcg4gaUVmD6JxucgrCBr7Utsf4W0Ze07dnMr2UsJStZyYKI8ou142A2dzgsxc+V+
n4nvAkswJ+GRiEQwx4A5yeZ7AgMBAAGjggNnMIIDYzAfBgNVHSMEGDAWgBRn/Ygg
FCeYxwnSJRm76VERY3VQYjAdBgNVHQ4EFgQUAYoD1aTfud51rPa5UWmzd7V5UBYw
NQYDVR0RBC4wLIIWcHJvZnMuc2NpZW56ZS51bml2ci5pdIIScHJvZnMuc2NpLnVu
aXZyLml0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29t
L1RFUkVOQVNTTENBMy5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNv
bS9URVJFTkFTU0xDQTMuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYI
KwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQIC
MG4GCCsGAQUFBwEBBGIwYDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNl
cnQuY29tMDgGCCsGAQUFBzAChixodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20v
VEVSRU5BU1NMQ0EzLmNydDAMBgNVHRMBAf8EAjAAMIIBgAYKKwYBBAHWeQIEAgSC
AXAEggFsAWoAdwC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAW21
Bp0JAAAEAwBIMEYCIQDk54d/wCEmL6Q+YmYBkGA6fNEfYfbwT+bCVUs4JULzDAIh
AMW80KkTcGMbDsMWlwkgHuAutq2igJmQvWkguNlFvi0+AHYAh3W/51l8+IxDmV+9
827/Vo1HVjb/SrVgwbTq/16ggw8AAAFttQadVgAABAMARzBFAiEAgdGXz6Sj3Wp1
xhkBi6tbbKU3E+zPe8jJycBVtkL3twwCIANcLB1XPRrvdxwyv/L5XePRqQ2TSok5
WtS9+eWq/mLzAHcARJRlLrDuzq/EQAfYqP4owNrmgr7YyzG1P9MzlrW2gagAAAFt
tQacXgAABAMASDBGAiEAoHNazBJgYMy+6kHvKyprJu5/kqs8AhdRv+KGPs7QvjsC
IQDT3+YmyHXGHIwnsNHJeuBZL54a4RplnA+/Itb/M0swBzANBgkqhkiG9w0BAQsF
AAOCAQEAU6yXnbnTlesAU74SgNT0UJHyBKn1i27OnMQvKgC/iyMmzj2QQrYGp8Bp
JODdT+uP0dcbwDjCMAZfsEw9NtWOkoqlc7N70ou5tWvScgvzvHPkP+Psimd6oSeT
Eitl2UCtOG6mibDVlajSLb6Ejd2EYM+1mIeVsGWqaylae/w4kSkj4tG3KQ0uNT1d
IjaSi9tXoa5FP2B9zml6QWzpvYU/wdljbKdaafhbhvcNsjw76czisAcnJ53PxKVE
7962SmKbIN9y0wnQ43MNkM7qyS9W0O9o+qMUFqbDPwbSEWOmxKtD1g+HVNUd2IbB
BgQ6W78Evf3Xm6LzscHFjWc27iqroA==
-----END CERTIFICATE-----
subject=C = IT, L = Verona, O = Universit\C3\A0 degli Studi di Verona, CN = profs.scienze.univr.it

issuer=C = NL, ST = Noord-Holland, L = Amsterdam, O = TERENA, CN = TERENA SSL CA 3

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 2806 bytes and written 404 bytes
Verification error: unable to verify the first certificate
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 4096 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 21 (unable to verify the first certificate)
---
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
    Protocol  : TLSv1.3
    Cipher    : TLS_AES_256_GCM_SHA384
    Session-ID: 753E00CEC40D49AB527478A14928D6F95940E90CB36FF517C27E113C8647D07E
    Session-ID-ctx: 
    Resumption PSK: FE61D17E0E3B08C74CF83F6541584366E9C930281FA0E7374D98BFE6C30C9B79878BB01BFBAA2DB798F762BB26AF8DBF
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - 84 19 78 4f 9e b7 d2 08-10 95 84 5f cd d8 04 41   ..xO......._...A
    0010 - 54 f3 65 ac 3c 70 fd 9f-33 8f 08 2a 80 86 35 77   T.e.<p..3..*..5w

    Start Time: 1610362534
    Timeout   : 7200 (sec)
    Verify return code: 21 (unable to verify the first certificate)
    Extended master secret: no
    Max Early Data: 0
---
read R BLOCK
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
    Protocol  : TLSv1.3
    Cipher    : TLS_AES_256_GCM_SHA384
    Session-ID: C5E042D79E7C693C5C9B8C2AFF15E950B7411F5FF8B166E24AE64A9772DD96B8
    Session-ID-ctx: 
    Resumption PSK: 55A90C46E2401D8F046F5FBFB41F662FFA8E067527DD386731FC123EFC0571CDE0042D118581181968D6DB3AB72481FE
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - be 57 dd 4e 15 84 2e ea-29 e3 89 6c 25 30 da 1c   .W.N....)..l%0..
    0010 - 0b 34 5b bc 6b 45 23 3a-5b 08 5a 21 d2 3e 76 c3   .4[.kE#:[.Z!.>v.

    Start Time: 1610362534
    Timeout   : 7200 (sec)
    Verify return code: 21 (unable to verify the first certificate)
    Extended master secret: no
    Max Early Data: 0
---
read R BLOCK
 closed

Thank you for the check.
I verified that on the external machine where I tried the svnrdump the certificate of the SVN server was already trusted.
Therefore, I didn't have the certificate error.
I am going to ask to the sys-admin to verify how such a certificate is not trusted.

Thanks again.

Roberto

The problem of the untrust certificate has been solved by UNIVR sys-admins.

The repository https://profs.scienze.univr.it/posenato/svn/sw/CSTNU is already archived in softwareheritage.org.

Thanks for the support.

Roberto

This task has been migrated to GitLab.

Exception: An error occurred when running svnrdump and no exploitable dump file has been generated.Closed, MigratedEdits LockedActions

Description

Event Timeline

Exception: An error occurred when running svnrdump and no exploitable dump file has been generated.
Closed, MigratedEdits Locked
Actions