blocks|key|4525507|text|对绝地的小小修正:这是来自http://www.visualsvn.com/server/的VisualSVN服务器|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|4525508|entityMap|0|LINK|mutability|MUTABLE|url|http://www.visualsvn.com/server/^0|D|W|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

Small correction to Jedi: it's VisualSVN Server from <a href="http://www.visualsvn.com/server/" rel="noreferrer">http://www.visualsvn.com/server/</a>

blocks|key|3057618|text|我使用来自http://www.visualsvn.com/server/的VisualSVN服务器，非常容易安装，并且可以与active+directory集成。它安装在win2008上没有任何问题。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|3057619|entityMap|0|LINK|mutability|MUTABLE|url|http://www.visualsvn.com/server/^0|5|W|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

I use VisualSVN Server from <a href="http://www.visualsvn.com/server/" rel="nofollow noreferrer">http://www.visualsvn.com/server/</a>, very easy to install and can be integrate with active directory. It's install on a win2008 with no problem.

blocks|key|3057699|text|这取决于你想在多大程度上考虑这个问题。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3057700|如果你想自己安装Subversion服务器，看起来你有两个选择：|3057701|3057702|Apache|unordered-list-item|3057703|Subversions自己的协议|3057704|3057705|无论哪种情况，问题不在于这两个人做了什么，而在于他们无意中做了什么。|3057706|如果Apache中存在允许外部攻击者访问您的数据的错误，那就不好了。如果Subversion自己的服务器中有允许相同的bug，那就不好了。|3057707|您需要做的是考虑场景的风险和后果，并在可能的情况下提出满足您需求的服务器设置。|3057708|你至少需要考虑的情况是：|3057709|3057710|Bug在任一系统中允许攻击者接收您的服务器(例如:使您的服务器使用过多的中央处理器时间的东西)|3057711|Bug在任一系统中允许攻击者访问该服务器上的数据|3057712|Bug允许攻击者访问您的域(即.可从该公共服务器访问的所有服务器和计算机)|3057713|3057714|就我个人而言，我已经考虑过有多少人现在通过Apache托管subversion服务器，并毫无疑问地安装了VisualSVN+Server来托管我自己的源代码。|offset|length|3057715|entityMap|0|LINK|mutability|MUTABLE|url|http://www.visualsvn.com/server^0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|1G|G|0|0^^$0|@$1|2|3|4|5|6|7|1C|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1D|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|1E|8|@]|9|@]|A|$]]|$1|E|3|F|5|G|7|1F|8|@]|9|@]|A|$]]|$1|H|3|I|5|G|7|1G|8|@]|9|@]|A|$]]|$1|J|3|-4|5|6|7|1H|8|@]|9|@]|A|$]]|$1|K|3|L|5|6|7|1I|8|@]|9|@]|A|$]]|$1|M|3|N|5|6|7|1J|8|@]|9|@]|A|$]]|$1|O|3|P|5|6|7|1K|8|@]|9|@]|A|$]]|$1|Q|3|R|5|6|7|1L|8|@]|9|@]|A|$]]|$1|S|3|-4|5|6|7|1M|8|@]|9|@]|A|$]]|$1|T|3|U|5|G|7|1N|8|@]|9|@]|A|$]]|$1|V|3|W|5|G|7|1O|8|@]|9|@]|A|$]]|$1|X|3|Y|5|G|7|1P|8|@]|9|@]|A|$]]|$1|Z|3|-4|5|6|7|1Q|8|@]|9|@]|A|$]]|$1|10|3|11|5|6|7|1R|8|@]|9|@$12|1S|13|1T|1|1U]]|A|$]]|$1|14|3|-4|5|6|7|1V|8|@]|9|@]|A|$]]]|15|$16|$5|17|18|19|A|$1A|1B]]]]

It depends on how far you want to consider this issue.

If you want to install a Subversion server on your own, it looks like you have two options:

<ul>
<li>Apache</li>
<li>Subversions own protocol</li>
</ul>

In either case, the problem isn't what the two do, but what the two unintentionally do.

If there are bugs in Apache that allows an outside attacker to gain access to your data, then that is bad. If there are bugs in Subversions own server that allows the same, that is bad.

What you need to do is consider risk and consequences for the scenarios, and come up with a server setup that meets your requirements, if possible.

The cases you would at least have to consider would be:

<ul>
<li>Bug in either system that allows an attacker to sink your server (example: something which makes your server use an inordinate amount of CPU time)</li>
<li>Bug in either system that allows an attacker access to the data on that server</li>
<li>Bug in either system that allows an attacker access to your domain (ie. all your servers and machines available from that public server)</li>
</ul>

Personally I have considered how many are hosting subversion servers through Apache now, and installed <a href="http://www.visualsvn.com/server" rel="nofollow noreferrer">VisualSVN Server</a> to host my own source code without a doubt.

blocks|key|3057606|text|对于简单的安全需求，使用svnserve设置Subversion几乎是小菜一碟。即使让它在Apache下运行以满足更广泛的安全需求也不是很困难。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3057607|这是一个很好的演练：|3057608|http://donie.homeip.net:8080/pebble/Steve/2006/02/27/1141079943879.html|offset|length|3057609|entityMap|0|LINK|mutability|MUTABLE|url^0|0|0|0|1Z|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|P|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|Q|8|@]|9|@$F|R|G|S|1|T]]|A|$]]|$1|H|3|-4|5|6|7|U|8|@]|9|@]|A|$]]]|I|$J|$5|K|L|M|A|$N|E]]]]

For simple security requirements, setting up Subversion with svnserve is almost trivial. Even getting it running under Apache for more extensive security needs is not overly difficult.

This is a good walk-through:

<a href="http://donie.homeip.net:8080/pebble/Steve/2006/02/27/1141079943879.html" rel="nofollow noreferrer">http://donie.homeip.net:8080/pebble/Steve/2006/02/27/1141079943879.html</a>

blocks|key|3057834|text|Apache和SVN很容易一起运行，但有许多步骤。现在肯定比两年前我第一次尝试的时候容易多了。在部署到服务器之前，请确保您有匹配的模块版本，并在本地花一些时间使用Apache。有带SSL和不带SSL的Apache版本。检查您是否有包含OpenSSL的证书，以保护网络上的凭据。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3057835|安装Apache以便可以手动启动，例如。不是作为一种服务。您需要这样做，以避免与服务器上的任何IIS应用程序发生冲突。一旦您的配置正确，您可以安装Apache以便稍后作为服务运行。|3057836|正常情况下，Apache将使用基本身份验证。您需要使用SSL来保护它，凭据在传输过程中不会加密。您将用户详细信息放在磁盘上的测试文件中。如果你想根据windows或active+directory对用户进行身份验证，你将有一个更大的任务要做(关于这一点，也许请参阅VisualSVN+)。|3057837|我快速浏览了一下VisuaSVN，它似乎是一个很好的选择。然而，少量的Apache配置经验可以在很大程度上发挥作用。来自IIS背景，这并不是太难，只是花了一些时间来检查所有的选项/设置。|3057838|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|J|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|K|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|L|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|M|8|@]|9|@]|A|$]]|$1|H|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|I|$]]

Apache and SVN are fairly easy to get running together but there are a number of steps. It is definitely easier today than 2 years ago when I first tried. Make sure you have matching versions of the modules and spend some time playing with Apache locally before deploying to your server. There are versions of Apache with and without SSL. Check you have the one with OpenSSL included to protect credentials on the wire.

Install Apache so that it can be manually started eg. not as a service. You'll want to do this to avoid a collision with any IIS apps on your server. You can install Apache to run as a service later, once your config is right.

Normally Apache will use Basic Authentication. You need to secure this using SSL, the credentials are not encrypted in transit. You put user details in a test file on disk. If you want to authenticate users against windows or active directory, you will have a larger task on your hands (perhaps see VisualSVN for this).

I had a quick look at VisuaSVN and it seems to be a good option. However a little Apache config experience can go a long way. Coming from an IIS background it wasn't too difficult, it just took some time to review all of the options/settings.

blocks|key|741764|text|VisualSVN就是这样一头罕见的野兽--它是一种安装工具，在Windows上比在Linux上更容易安装。考虑到Linux，你只需要输入"yum+install+subversion"，这是一些赞誉。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|741765|但是，如果你真的很担心，我会安装VMware，并在你的web服务器上的客户操作系统中运行你的SVN服务器。|741766|安全性:如果您运行svnserve，则只需阻止除您的计算机以外的所有人访问该端口(3960)。如果没有，您将需要保护svn+auth配置文件。如果你使用apache运行它，那么它只是另一个需要保护的网站，方式和往常一样。|741767|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|H|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|I|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|J|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|G|$]]

VisualSVN is such a rare beast - a setup tool that is easier to install SVN on Windows than it is on Linux. And considering Linux you just have to type "yum install subversion", that's some praise.

However, if you're really worried, I would install VMware alongside and run your SVN server in a guest OS on your web server.

Security: if you run svnserve, then simply block access to that port (3960) to all but your computers. If not, you'll need to secure the svn auth config files.
If you're running it using apache, then its just another website to secure, in the same ways as usual.

blocks|key|741836|text|生产svn服务器在可用性方面很重要，但它永远不够，无论是Windows+Srvr+2007还是RH+Linux都无关紧要。您将需要一个深思熟虑的备份策略和小心的访问管理。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|741837|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

The production svn server is important in terms of availability but it's never going to be enough and it doesn't matter whether it's Windows Srvr 2007, RH Linux whatever.. You'll need a well thought backup policy and taking care access management.

blocks|key|972177|text|在Windows环境中设置SVN非常困难，至少如果您想要托管SVN，本地存储库是不同的。我的建议是继续使用这家公司，或者找一个更便宜的SVN，这样就不会花那么多钱了。它们设置起来并不困难，但是你会讨厌因为备份不当而丢失所有的源代码。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|972178|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

SVN is very difficult to get setup in the Windows environment, at least if you want hosted SVN, a local repository is different. My suggestion is stick with the company or search out a cheaper SVN that will not cost as much money. They are not difficult to setup, but you would hate to lose all your source code because of an improper backup.

I have a web server and I am currently paying for SVN hosting at a company that specializes in hosting svn.

I am thinking of just installing SVN on my dedicated server, are there any security implications of this?

Is it safe to install SVN on a production win2008 web server?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

教程

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云智能顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云AI代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

功能1上新10个字符

功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符。

功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符。

功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符

功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符

功能4上新

文章&问答评论现已支持表情

全新交互，全新视觉，新增快捷键、悬浮工具栏、高亮块等功能并同时优化现有功能，全面提升创作效率和体验

社区富文本编辑器全新改版！诚邀体验～ 

精选全网热门MCP server，让你的AI更好用 🚀

💥开发者 MCP广场重磅上线！

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

聚焦“写作效率、视觉美观与运行性能”三方面进行全面升级，为您提供更高效、稳定的创作环境

社区富文本&Markdown编辑器全新改版上线，欢迎大家体验!

诚挚邀请您参与本次调研，分享您的真实使用感受与建议。您的反馈至关重要，感谢您的支持与参与！

社区新版编辑器体验调研

我有一台web服务器，目前我在一家专门托管svn的公司为SVN托管付费。我正在考虑只在我的专用服务器上安装SVN，这有什么安全隐患吗？

问在生产win2008 web服务器上安装SVN是否安全？
EN

回答 8

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问在生产win2008 web服务器上安装SVN是否安全？EN

回答 8

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问在生产win2008 web服务器上安装SVN是否安全？
EN