Verifying a subversion checkout

C. P. Ghost cpghost at cordula.ws
Tue Feb 11 07:26:21 UTC 2014


Hello,

is there a way to automatically verify that the checkout
of a random subversion revision of /usr/src hasn't been
tampered with?

I'm worried about the possibility of
  1/ an MitM attack while fetching the sources
  2/ changes to the local /usr/src for whatever reasons

2/ isn't so critical; there's always the possibility to check
them from another machine, provided checksums were
created immediately after the svn update. It's 1/ that's
bothering me.

Or, asked differently, does SVN protocol support some
kind of authentication that thwarts man-in-the-middle
attacks?

Of course, at release points, we always have checksums
for the ISO images. That's security-wise the only point
where I'm sure that I'm running from genuine sources.
It's what's in-between releases that I'm asking about.

Thanks,
-cpghost.

-- 
Cordula's Web. http://www.cordula.ws/


More information about the freebsd-questions mailing list