| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136 |
- ### This file specifies server-specific parameters,
- ### including HTTP proxy information, HTTP timeout settings,
- ### and authentication settings.
- ###
- ### The currently defined server options are:
- ### http-proxy-host Proxy host for HTTP connection
- ### http-proxy-port Port number of proxy host service
- ### http-proxy-username Username for auth to proxy service
- ### http-proxy-password Password for auth to proxy service
- ### http-proxy-exceptions List of sites that do not use proxy
- ### http-timeout Timeout for HTTP requests in seconds
- ### http-compression Whether to compress HTTP requests
- ### (yes/no/auto).
- ### http-max-connections Maximum number of parallel server
- ### connections to use for any given
- ### HTTP operation.
- ### http-chunked-requests Whether to use chunked transfer
- ### encoding for HTTP requests body.
- ### http-auth-types List of HTTP authentication types.
- ### ssl-authority-files List of files, each of a trusted CA
- ### ssl-trust-default-ca Trust the system 'default' CAs
- ### ssl-client-cert-file PKCS#12 format client certificate file
- ### ssl-client-cert-password Client Key password, if needed.
- ### ssl-pkcs11-provider Name of PKCS#11 provider to use.
- ### http-library Which library to use for http/https
- ### connections.
- ### http-bulk-updates Whether to request bulk update
- ### responses or to fetch each file
- ### in an individual request.
- ### store-passwords Specifies whether passwords used
- ### to authenticate against a
- ### Subversion server may be cached
- ### to disk in any way.
- ### store-ssl-client-cert-pp Specifies whether passphrase used
- ### to authenticate against a client
- ### certificate may be cached to disk
- ### in any way
- ### store-auth-creds Specifies whether any auth info
- ### (passwords, server certs, etc.)
- ### may be cached to disk.
- ### username Specifies the default username.
- ###
- ### Set store-passwords to 'no' to avoid storing new passwords on
- ### disk in any way, including in password stores. It defaults to
- ### 'yes', but Subversion will never save your password to disk in
- ### plaintext unless explicitly configured to do so.
- ###
- ### Set store-ssl-client-cert-pp to 'no' to avoid storing new ssl
- ### client certificate passphrases in the auth/ area of your
- ### config directory. It defaults to 'yes', but Subversion will
- ### never save your passphrase to disk in plaintext unless
- ### explicitly configured to do so.
- ###
- ### Set store-auth-creds to 'no' to avoid storing any new Subversion
- ### credentials in the auth/ area of your config directory.
- ### Note that this includes SSL server certificates.
- ### It defaults to 'yes'.
- ###
- ### Note that setting a 'store-*' option to 'no' only prevents
- ### saving of *new* passwords, passphrases or other credentials.
- ### It does not remove or invalidate existing stored credentials.
- ### To do that, see the 'svn auth --remove' command, or remove the
- ### cache files by hand as described in the Subversion book at
- ### http://svnbook.red-bean.com/nightly/en/svn.serverconfig.netmodel.html#svn.tour.initial.authn-cache-purge
- ###
- ### HTTP timeouts, if given, are specified in seconds. A timeout
- ### of 0, i.e. zero, causes a builtin default to be used.
- ###
- ### Most users will not need to explicitly set the http-library
- ### option, but valid values for the option include:
- ### 'serf': Serf-based module (Subversion 1.5 - present)
- ### Availability of these modules may depend on your specific
- ### Subversion distribution.
- ###
- ### The commented-out examples below are intended only to
- ### demonstrate how to use this file; any resemblance to actual
- ### servers, living or dead, is entirely coincidental.
- ### In the 'groups' section, the URL of the repository you're
- ### trying to access is matched against the patterns on the right.
- ### If a match is found, the server options are taken from the
- ### section with the corresponding name on the left.
- [groups]
- # group1 = *.collab.net
- # othergroup = repository.blarggitywhoomph.com
- # thirdgroup = *.example.com
- ### Information for the first group:
- # [group1]
- # http-proxy-host = proxy1.some-domain-name.com
- # http-proxy-port = 80
- # http-proxy-username = blah
- # http-proxy-password = doubleblah
- # http-timeout = 60
- # username = harry
- ### Information for the second group:
- # [othergroup]
- # http-proxy-host = proxy2.some-domain-name.com
- # http-proxy-port = 9000
- # No username and password for the proxy, so use the defaults below.
- ### You can set default parameters in the 'global' section.
- ### These parameters apply if no corresponding parameter is set in
- ### a specifically matched group as shown above. Thus, if you go
- ### through the same proxy server to reach every site on the
- ### Internet, you probably just want to put that server's
- ### information in the 'global' section and not bother with
- ### 'groups' or any other sections.
- ###
- ### Most people might want to configure password caching
- ### parameters here, but you can also configure them per server
- ### group (per-group settings override global settings).
- ###
- ### If you go through a proxy for all but a few sites, you can
- ### list those exceptions under 'http-proxy-exceptions'. This only
- ### overrides defaults, not explicitly matched server names.
- ###
- ### 'ssl-authority-files' is a semicolon-delimited list of files,
- ### each pointing to a PEM-encoded Certificate Authority (CA)
- ### SSL certificate. See details above for overriding security
- ### due to SSL.
- [global]
- # http-proxy-exceptions = *.exception.com, www.internal-site.org
- # http-proxy-host = defaultproxy.whatever.com
- # http-proxy-port = 7000
- # http-proxy-username = defaultusername
- # http-proxy-password = defaultpassword
- # http-compression = auto
- # No http-timeout, so just use the builtin default.
- # ssl-authority-files = /path/to/CAcert.pem;/path/to/CAcert2.pem
- #
- # Password / passphrase caching parameters:
- # store-passwords = no
- # store-ssl-client-cert-pp = no
|
