I can no longer check out commits from svn.blender.org. I normally use git-svn, but I also tried the regular svn client, with the same result:

Code:

ldo@theon:blender-svn> svn update svn: OPTIONS of 'https://svn.blender.org/svnroot/bf-blender/trunk/blender': Certificate verification error: signed using insecure algorithm (https://svn.blender.org)

Anyone else hit this? My Subversion client version is 1.6.17.

I've been having the same problem for a few weeks now( after an OS update) and have googled for hours about the problem ( which is how I found this thread...)

Anyway, last night I found this and it worked for me:
http://linux-knowledgebase.com/en/Tip_of_the_day/December/Certificate_verification_error%253A_signed_using_insecure_algorithm

Hey, it works!

I was previously trying a different workaround, as described here http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507374. But the trouble with that one was, while it worked in the svn client when used directly, I was getting segfaults with git-svn.

With this technique, git-svn can fetch new commits without crashing.

Thanks.

It should be up to the BF sysadmins to fix this (i.e. get a reputable cert), not users to work around this.

In principle, I would agree; in practice, there seem to be disagreements over whether the way MD5 is being used is really insecure or not.

ldo wrote:

In principle, I would agree; in practice, there seem to be disagreements over whether the way MD5 is being used is really insecure or not.

You're right.
Had the same problem until know. Thank you for sharing the solution!

As long as there are easy workarounds, they should not be blamed! It's a free project. And the usual way is downloading manually anyway . Okay, this is a unpleasant process, but finnally it works.

Nice to know Blender with us.