Package: inn2 Version: 2.6.1-2 Severity: minor Hi
It seems nnrpd -S does not send intermediate certificates that are included in tlscertfile. Instead only the first certificate is presented. On first glance it might be fixed by replacing SSL_CTX_use_certificate_file() with SSL_CTX_use_certificate_chain_file() in nnrpd/tls.c:379 (inside set_cert_stuff). Then again, I may be totally wrong. Cheers, Michael -- System Information: Debian Release: 9.2 APT prefers stable-updates APT policy: (700, 'stable-updates'), (700, 'stable') Architecture: i386 (i686) Kernel: Linux 4.9.0-4-686-pae (SMP w/1 CPU core) Locale: LANG=, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE= (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages inn2 depends on: ii cron 3.0pl1-128+b1 ii exim4-daemon-heavy [mail-transport-agent] 4.89-2+deb9u2 ii inn2-inews 2.6.1-2 ii libc6 2.24-11+deb9u1 ii libdb5.3 5.3.28-12+deb9u1 ii libmime-tools-perl 5.508-1 ii libpam0g 1.1.8-3.6 ii libperl5.24 5.24.1-3+deb9u2 ii libsasl2-2 2.1.27~101-g0780600+dfsg-3 ii libssl1.1 1.1.0f-3+deb9u1 ii lsb-base 9.20161125 ii perl 5.24.1-3+deb9u2 ii perl-base [perlapi-5.24.1] 5.24.1-3+deb9u2 ii procps 2:3.3.12-3 ii time 1.7-25.1+b1 ii zlib1g 1:1.2.8.dfsg-5 inn2 recommends no packages. Versions of packages inn2 suggests: ii gnupg 2.1.18-8~deb9u1 ii libcomerr2 1.43.4-2 ii libgd-perl 2.53-3 ii libkrb5-3 1.15-1+deb9u1 ii wget 1.18-5+deb9u1 -- Configuration Files: /etc/cron.d/inn2 changed [not included] /etc/news/control.ctl changed [not included] /etc/news/cycbuff.conf changed [not included] /etc/news/expire.ctl changed [not included] /etc/news/filter/filter_innd.pl changed [not included] /etc/news/filter/filter_nnrpd.pl changed [not included] /etc/news/incoming.conf changed [not included] /etc/news/innfeed.conf changed [not included] /etc/news/innreport.conf changed [not included] /etc/news/newsfeeds changed [not included] /etc/news/nnrpd.track changed [not included] /etc/news/ovdb.conf changed [not included] /etc/news/readers.conf changed [not included] /etc/news/storage.conf changed [not included] /etc/news/subscriptions changed [not included] -- debconf information excluded
