Your message dated Mon, 08 Feb 2021 18:18:43 +0000
with message-id <[email protected]>
and subject line Bug#980513: fixed in gnutls28 3.7.0-6
has caused the Debian Bug report #980513,
regarding libgnutls30: _gnutls_sort_clist Assertion with openconnect
GlobalProtect VPN
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
980513: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=980513
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libgnutls30
Version: 3.7.0-5
Severity: important
X-Debbugs-Cc: [email protected]
Dear Maintainer,
After an upgrade to 3.7.0-5, I can no longer connect to a GlobalProtect VPN
with openconnect.
This is the output from a connection attempt (with identifying information
removed):
$ sudo openconnect --protocol gp -u <username> <url>
POST
https://<url>/global-protect/prelogin.esp?tmp=tmp&clientVer=4100&clientos=Linux
Connected to <ip>:443
SSL negotiation with <url>
openconnect: ../../../lib/x509/common.c:1794: _gnutls_sort_clist: Assertion `k
== clist_size' failed.
Aborted
The connection works if I downgrade libgnutls30 to 3.6.15-5
-- System Information:
Debian Release: bullseye/sid
APT prefers testing
APT policy: (900, 'testing'), (600, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 5.9.0-5-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages libgnutls30 depends on:
ii libc6 2.31-9
ii libgmp10 2:6.2.1+dfsg-1
ii libhogweed6 3.6-2
ii libidn2-0 2.3.0-5
ii libnettle8 3.6-2
ii libp11-kit0 0.23.22-1
ii libtasn1-6 4.16.0-2
ii libunistring2 0.9.10-4
libgnutls30 recommends no packages.
Versions of packages libgnutls30 suggests:
pn gnutls-bin <none>
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: gnutls28
Source-Version: 3.7.0-6
Done: Andreas Metzler <[email protected]>
We believe that the bug you reported is fixed in the latest version of
gnutls28, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Andreas Metzler <[email protected]> (supplier of updated gnutls28 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 08 Feb 2021 18:04:21 +0100
Source: gnutls28
Architecture: source
Version: 3.7.0-6
Distribution: unstable
Urgency: medium
Maintainer: Debian GnuTLS Maintainers <[email protected]>
Changed-By: Andreas Metzler <[email protected]>
Closes: 980513
Changes:
gnutls28 (3.7.0-6) unstable; urgency=medium
.
* Update 49_0001-gnutls_x509_trust_list_verify_crt2-ignore-duplicate-.patch
with merged version from upstream GIT master. Features a fix for an assert
on connection to servers which send a duplicate chain including the
self-signed CA. Closes: #980513
Checksums-Sha1:
3393393bec1ab73ef0644b370d4b4f8f35e410d9 3480 gnutls28_3.7.0-6.dsc
243dc7ee809cedeb89409eb3159816ca2187e085 71140 gnutls28_3.7.0-6.debian.tar.xz
Checksums-Sha256:
31258d94b6b3b89fc114110db497d23be376a8516df4a04170500ec2c7865714 3480
gnutls28_3.7.0-6.dsc
1e61d6b49d32004ef462e78dae468d15a58ab1938253c57c0649cb73f8e52ae2 71140
gnutls28_3.7.0-6.debian.tar.xz
Files:
9ea6a433c158a822d63d7637df169060 3480 libs optional gnutls28_3.7.0-6.dsc
f78e5d90302f3b0fd36e08552fe8a566 71140 libs optional
gnutls28_3.7.0-6.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=qoif
-----END PGP SIGNATURE-----
--- End Message ---
