Your message dated Fri, 02 Jan 2015 12:40:16 +0000
with message-id <[email protected]>
and subject line Bug#767610: Removed package(s) from unstable
has caused the Debian Bug report #525962,
regarding libgnutls26 makes apt-transport-https fail with ssl key/cert client 
authentication
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
525962: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=525962
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libgnutls26
Severity: important
Version: 2.4.2-6+lenny1
Tags: lenny

When using apt-transport-https to fetch packages from a https web server 
configured with required client authentication (apt options Acquire::
{CaInfo,SslCert,SslKey}), an apt-operation will fail with misleading message:

---- * ----
# apt-get update
[...]
Err https://debian.<privateurl> lenny/main Packages
  Sub-process bzip2 returned an error code (2)
Fetched 140B in 0s (248B/s)
W: GPG error: https://debian.<privateurl> lenny Release:  The following 
signatures were invalid: NODATA 1 NODATA 2
W: Failed to fetch https://debian.<privateurl>/debian/dists/lenny/main/binary-
i386/Packages.bz2  Sub-process bzip2 returned an error code (2)

E: Some index files failed to download, they have been ignored, or old ones 
used instead.
---- * ----

Upgrading to libgnutls26 to sid's 2.6.5-1 fixes the problem.

If I disable client authentication on the web server, leaving just https 
server authentication (via the cacert), it works even with lenny's version.

This bug should be probably mentioned  on apt-transport-https bug entries too 
since the error reported is misleading and since testing curl via command line 
with --cacert, --cert and --key just works (with the same .pem files specified 
in apt.conf*.)

-- 
ESC:wq

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.




--- End Message ---
--- Begin Message ---
Version: 2.12.23-17+rm

Dear submitter,

as the package gnutls26 has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see https://bugs.debian.org/767610

The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
[email protected].

Debian distribution maintenance software
pp.
Scott Kitterman (the ftpmaster behind the curtain)

--- End Message ---

Reply via email to