Your message dated Thu, 30 Jan 2020 20:36:38 +0000
with message-id <[email protected]>
and subject line Bug#949293: fixed in gnutls28 3.6.7-4+deb10u2
has caused the Debian Bug report #949293,
regarding gnutls28: [buster] Fails to parse certs with RegisteredID
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
949293: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=949293
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: gnutls28
Version: 3.5.10-1
Severity: important
Tags: patch buster
Control: forwared -1 https://gitlab.com/gnutls/gnutls/issues/905
GnuTLS 3.5.10 to 3.6.8 fails to parse certificates using RegisteredID
which is a regression.
-------------
certtool --verify-chain --verify-hostname=node.acme.com --infile=/tmp/chain.pem
error parsing CRTs: Unknown Subject Alternative name in X.509 certificate.
-------------
cu Andreas
--
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
--- End Message ---
--- Begin Message ---
Source: gnutls28
Source-Version: 3.6.7-4+deb10u2
We believe that the bug you reported is fixed in the latest version of
gnutls28, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Andreas Metzler <[email protected]> (supplier of updated gnutls28 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 19 Jan 2020 14:03:08 +0100
Source: gnutls28
Architecture: source
Version: 3.6.7-4+deb10u2
Distribution: buster
Urgency: medium
Maintainer: Debian GnuTLS Maintainers <[email protected]>
Changed-By: Andreas Metzler <[email protected]>
Closes: 949293
Changes:
gnutls28 (3.6.7-4+deb10u2) buster; urgency=medium
.
* Fix parsing of certificates using RegisteredID Closes: #949293
Checksums-Sha1:
e8f1e7f6ed45af9ec43076eaa5fcb920f8790144 3354 gnutls28_3.6.7-4+deb10u2.dsc
f48cba986894d6b36b903d5ff5f41f48db6bd49c 77516
gnutls28_3.6.7-4+deb10u2.debian.tar.xz
Checksums-Sha256:
e7d5063186b5773fa91de22fa2ff34a13400a012cbd239b51d882971b2d9efca 3354
gnutls28_3.6.7-4+deb10u2.dsc
72cd1e02b3b3c39c79f69da00a958d906d0332f15067d5c1b4e40bcd897a0d2e 77516
gnutls28_3.6.7-4+deb10u2.debian.tar.xz
Files:
edaeb39994114f9bbec9c1269ce97572 3354 libs optional
gnutls28_3.6.7-4+deb10u2.dsc
d1d25126d6187bf19a0d5d3b16023a7d 77516 libs optional
gnutls28_3.6.7-4+deb10u2.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=N5u0
-----END PGP SIGNATURE-----
--- End Message ---
