136 lines
6.3 KiB
Text
136 lines
6.3 KiB
Text
### This file specifies server-specific parameters,
|
|
### including HTTP proxy information, HTTP timeout settings,
|
|
### and authentication settings.
|
|
###
|
|
### The currently defined server options are:
|
|
### http-proxy-host Proxy host for HTTP connection
|
|
### http-proxy-port Port number of proxy host service
|
|
### http-proxy-username Username for auth to proxy service
|
|
### http-proxy-password Password for auth to proxy service
|
|
### http-proxy-exceptions List of sites that do not use proxy
|
|
### http-timeout Timeout for HTTP requests in seconds
|
|
### http-compression Whether to compress HTTP requests
|
|
### (yes/no/auto).
|
|
### http-max-connections Maximum number of parallel server
|
|
### connections to use for any given
|
|
### HTTP operation.
|
|
### http-chunked-requests Whether to use chunked transfer
|
|
### encoding for HTTP requests body.
|
|
### http-auth-types List of HTTP authentication types.
|
|
### ssl-authority-files List of files, each of a trusted CA
|
|
### ssl-trust-default-ca Trust the system 'default' CAs
|
|
### ssl-client-cert-file PKCS#12 format client certificate file
|
|
### ssl-client-cert-password Client Key password, if needed.
|
|
### ssl-pkcs11-provider Name of PKCS#11 provider to use.
|
|
### http-library Which library to use for http/https
|
|
### connections.
|
|
### http-bulk-updates Whether to request bulk update
|
|
### responses or to fetch each file
|
|
### in an individual request.
|
|
### store-passwords Specifies whether passwords used
|
|
### to authenticate against a
|
|
### Subversion server may be cached
|
|
### to disk in any way.
|
|
### store-ssl-client-cert-pp Specifies whether passphrase used
|
|
### to authenticate against a client
|
|
### certificate may be cached to disk
|
|
### in any way
|
|
### store-auth-creds Specifies whether any auth info
|
|
### (passwords, server certs, etc.)
|
|
### may be cached to disk.
|
|
### username Specifies the default username.
|
|
###
|
|
### Set store-passwords to 'no' to avoid storing new passwords on
|
|
### disk in any way, including in password stores. It defaults to
|
|
### 'yes', but Subversion will never save your password to disk in
|
|
### plaintext unless explicitly configured to do so.
|
|
###
|
|
### Set store-ssl-client-cert-pp to 'no' to avoid storing new ssl
|
|
### client certificate passphrases in the auth/ area of your
|
|
### config directory. It defaults to 'yes', but Subversion will
|
|
### never save your passphrase to disk in plaintext unless
|
|
### explicitly configured to do so.
|
|
###
|
|
### Set store-auth-creds to 'no' to avoid storing any new Subversion
|
|
### credentials in the auth/ area of your config directory.
|
|
### Note that this includes SSL server certificates.
|
|
### It defaults to 'yes'.
|
|
###
|
|
### Note that setting a 'store-*' option to 'no' only prevents
|
|
### saving of *new* passwords, passphrases or other credentials.
|
|
### It does not remove or invalidate existing stored credentials.
|
|
### To do that, see the 'svn auth --remove' command, or remove the
|
|
### cache files by hand as described in the Subversion book at
|
|
### http://svnbook.red-bean.com/nightly/en/svn.serverconfig.netmodel.html#svn.tour.initial.authn-cache-purge
|
|
###
|
|
### HTTP timeouts, if given, are specified in seconds. A timeout
|
|
### of 0, i.e. zero, causes a builtin default to be used.
|
|
###
|
|
### Most users will not need to explicitly set the http-library
|
|
### option, but valid values for the option include:
|
|
### 'serf': Serf-based module (Subversion 1.5 - present)
|
|
### Availability of these modules may depend on your specific
|
|
### Subversion distribution.
|
|
###
|
|
### The commented-out examples below are intended only to
|
|
### demonstrate how to use this file; any resemblance to actual
|
|
### servers, living or dead, is entirely coincidental.
|
|
|
|
### In the 'groups' section, the URL of the repository you're
|
|
### trying to access is matched against the patterns on the right.
|
|
### If a match is found, the server options are taken from the
|
|
### section with the corresponding name on the left.
|
|
|
|
[groups]
|
|
# group1 = *.collab.net
|
|
# othergroup = repository.blarggitywhoomph.com
|
|
# thirdgroup = *.example.com
|
|
|
|
### Information for the first group:
|
|
# [group1]
|
|
# http-proxy-host = proxy1.some-domain-name.com
|
|
# http-proxy-port = 80
|
|
# http-proxy-username = blah
|
|
# http-proxy-password = doubleblah
|
|
# http-timeout = 60
|
|
# username = harry
|
|
|
|
### Information for the second group:
|
|
# [othergroup]
|
|
# http-proxy-host = proxy2.some-domain-name.com
|
|
# http-proxy-port = 9000
|
|
# No username and password for the proxy, so use the defaults below.
|
|
|
|
### You can set default parameters in the 'global' section.
|
|
### These parameters apply if no corresponding parameter is set in
|
|
### a specifically matched group as shown above. Thus, if you go
|
|
### through the same proxy server to reach every site on the
|
|
### Internet, you probably just want to put that server's
|
|
### information in the 'global' section and not bother with
|
|
### 'groups' or any other sections.
|
|
###
|
|
### Most people might want to configure password caching
|
|
### parameters here, but you can also configure them per server
|
|
### group (per-group settings override global settings).
|
|
###
|
|
### If you go through a proxy for all but a few sites, you can
|
|
### list those exceptions under 'http-proxy-exceptions'. This only
|
|
### overrides defaults, not explicitly matched server names.
|
|
###
|
|
### 'ssl-authority-files' is a semicolon-delimited list of files,
|
|
### each pointing to a PEM-encoded Certificate Authority (CA)
|
|
### SSL certificate. See details above for overriding security
|
|
### due to SSL.
|
|
[global]
|
|
# http-proxy-exceptions = *.exception.com, www.internal-site.org
|
|
# http-proxy-host = defaultproxy.whatever.com
|
|
# http-proxy-port = 7000
|
|
# http-proxy-username = defaultusername
|
|
# http-proxy-password = defaultpassword
|
|
# http-compression = auto
|
|
# No http-timeout, so just use the builtin default.
|
|
# ssl-authority-files = /path/to/CAcert.pem;/path/to/CAcert2.pem
|
|
#
|
|
# Password / passphrase caching parameters:
|
|
# store-passwords = no
|
|
# store-ssl-client-cert-pp = no
|