Package: gnutls-bin Version: 3.3.8-6+deb8u3 The output file containing the DER-encoded OCSP response starts with a newline; ocsptool itself can't read the file anymore, failing with:
importing response: ASN1 parser: Error in TAG. This was fixed upstream in commit e95d7d1a (first released with 3.5.0): https://gitlab.com/gnutls/gnutls/commit/e95d7d1aca6f5e078f354c22b85d961ded8e16a1 with commit message: > ocsptool: Allow saving responses even if verification fails > > In addition do not enter a spurious newline to responses. Somehow the more important thing was not the subject :( As this never worked before I'm not assigning any severity. Not sure how to tell the bug tracker that stretch/sid are not affected :)

