Your message dated Sun, 22 May 2016 23:36:46 +0200
with message-id <[email protected]>
and subject line Re: Bug#176062: Seems fixed in 0.9.8b-2
has caused the Debian Bug report #176062,
regarding openssl: Expired certificates and recertification
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
176062: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=176062
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: openssl
Version: 0.9.6g-10
Severity: normal
Tags: upstream
"openssl ca" refuses to certifiy a DN which has already been certified,
even though the old certificate has expired. As a result,
recertification requires an additional, IMHO unnecessary step.
-- System Information:
Debian Release: 3.0
Architecture: i386
Kernel: Linux Login 2.4.18-xfs-1.1 #6 SMP Fri Jan 3 14:39:36 CET 2003 i686
Locale: LANG=C, LC_CTYPE=en_US
Versions of packages openssl depends on:
ii libc6 2.3.1-5 GNU C Library: Shared libraries an
ii libssl0.9.6 0.9.6g-10 SSL shared libraries
ii perl 5.8.0-14 Larry Wall's Practical Extraction
-- no debconf information
--- End Message ---
--- Begin Message ---
Version: 0.9.7d-1
On 2006-07-08 23:06:37 [+0100], Phil Endecott wrote:
> This was fixed in 0.9.8.
>
> You need to put "unique_subject = no" in the ca section of your
> configuration file and it will let you have more than one certificate
> for the same DN, i.e. a new one when your old one expires. (Search
> for "subject" in the changelog.)
>
> I suggest that this line is added to the default configuration file.
There is this:
| #unique_subject = no # Set to 'no' to allow creation of
| # several ctificates with same
subject.
in openssl.cnf. From the changelog it was fixed in 0.9.7d.
> Phil.
Sebastian
--- End Message ---