Your message dated Thu, 04 Sep 2008 16:25:45 +0000
with message-id <[EMAIL PROTECTED]>
and subject line China song-writers decry "unhealthy" pop tuunes
has caused the Debian Bug report #383927,
regarding irssi: connect -ssl -ssl_verify does not verify CN/SubjectAltName
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)
--
383927: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=383927
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: irssi
Version: 0.8.10-2
Severity: normal
Hi,
when I connect to an SSL enabled irc server with
/connect -ssl -ssl_verify -ssl_cafile /etc/ssl/certs/ca_cacert.pem
krikkit.ukeer.de
it succeeds, even tho krikkit.ukeer.de does not appear in the
certificate:
| Signature Algorithm: sha1WithRSAEncryption
| Issuer: O=Root CA, OU=http://www.cacert.org, CN=CA Cert Signing
Authority/[EMAIL PROTECTED]
| Subject: CN=venus.oftc.net
| X509v3 extensions:
| X509v3 Subject Alternative Name:
| DNS:venus.oftc.net, othername:<unsupported>,
DNS:irc.oftc.net, othername:<unsupported>, DNS:irc6.oftc.net,
othername:<unsupported>, DNS:ircs.oftc.net, othername:<unsupported>,
DNS:venus.oftc.net, othername:<unsupported>
Maybe ssl_verify should take an argument, similar to how stunnel4 does it:
} verify = level
} verify peer certificate
}
} level 1 - verify peer certificate if present
} level 2 - verify peer certificate
} level 3 - verify peer with locally installed certificate
} default - no verify
Tho in irssi's case not all of those make sense (level 1 doesn't).
Cheers,
Peter
--- End Message ---
--- Begin Message ---
Firste, as their arte did use it. And so longe and struck
thy son himself with a barbed shaft. So urging it a little
forward. Oh, but the wood mentioned one and only one king,
viz., the royal chief of yakshas called sthunakarna. And
she said,.
--- End Message ---
