Source: gnutls28 Version: 3.5.10-1 Severity: important Tags: patch buster Control: forwared -1 https://gitlab.com/gnutls/gnutls/issues/905
GnuTLS 3.5.10 to 3.6.8 fails to parse certificates using RegisteredID which is a regression. ------------- certtool --verify-chain --verify-hostname=node.acme.com --infile=/tmp/chain.pem error parsing CRTs: Unknown Subject Alternative name in X.509 certificate. ------------- cu Andreas -- `What a good friend you are to him, Dr. Maturin. His other friends are so grateful to you.' `I sew his ears on from time to time, sure'
-----BEGIN CERTIFICATE----- MIIFhzCCA2+gAwIBAgIIVRr27nlGS/4wDQYJKoZIhvcNAQELBQAwgYsxCzAJBgNV BAYTAkRFMRAwDgYDVQQIEwdCYXZhcmlhMQ4wDAYDVQQHEwVHbG9ubjEWMBQGA1UE ChMNSERMLVN5bmVyZ2llczEPMA0GA1UECxMGRG9pdExMMRAwDgYDVQQDEwdlY3Mx LUNBMR8wHQYJKoZIhvcNAQkBFhBjZXJ0c0Bkb2l0bGwuY29tMB4XDTIwMDExMzAw MDAwMFoXDTIxMDExMjIzNTk1OVowZDELMAkGA1UEBhMCREUxEDAOBgNVBAgTB0Jh dmFyaWExDjAMBgNVBAcTBUdsb25uMQ0wCwYDVQQKEwRhY21lMQwwCgYDVQQLEwNF Q1MxFjAUBgNVBAMTDW5vZGUuYWNtZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMkJJqHU7N7qOrZ2CaBbiAlVuo/OmgLDdJqSiIOSSTM5CgChj0 nZ2A/K5sY4cAmqdc10SxC8Gf3I/wMQcBLRXwUckpRJcauOCQOAf4KBu5S2ZddXf0 2mB4i/Oj5lRPri3CRQZjPeB/AXUaM73efLT94uHjnxNnoGsE5gMrfLcGGZGbwPxq 7wXL42UjS+svKblnhs32jjAr+5480KqU/ln5j7wZFpZ7gh8rfdv4Ye/D7lZeZWmM w521oD62yn5F4dlv6X6qO6XA8xubU11rw6BJB+9qPU1nyRr+RTpksj5/2kX7zxik oamizIviJd2cHuUMDFvUQl7rD046sMi1gFiNAgMBAAGjggETMIIBDzAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBSPwl4fSMJ0Stb0X6FFJnMPSic1pTALBgNVHQ8EBAMC BeAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDkGA1UdEQQyMDCIBSoD BAUFgg1ub2RlLmFjbWUuY29thwR/AAABghJjbHVzdGVyLmRvaXRsbC5jb20wQAYD VR0fBDkwNzA1oDOgMYYvaHR0cDovL3d3dy5hY21lLmNvbS9jZXJ0cy9lbGFzdGlj c2VhcmNoLWNybC5wZW0wEQYJYIZIAYb4QgEBBAQDAgbAMCQGCWCGSAGG+EIBDQQX FhVEb2l0TEwgSW5mcmFzdHJ1Y3R1cmUwDQYJKoZIhvcNAQELBQADggIBAB1ezzld haFOqtftCjDeX6h3LogqVdUx12X313ysOKThBS3b9zOnhJY5OSMwyMfXS+p8LYNV XYILX23/MmLwYFVOIwLt9ii+FBonCIVUPSeR1sZcNPUoOExEpbPK1gWyPlW6J7B9 K95Xme0hUUVGaLxUvkjpi8XeLnqMz18V5DIh/tVZ+ssvSjeOc6tE80imFxyKYF4h LNN9i7c2pg0vwBvUEIg8sdGLT8m4JCzhgejv8DY6QlOpzvXihXp3MPmtRmgVrIw5 LLMCsoz+JtsjIrEcwlYG6q5/84tCHyF/dZ/m73LR+o61aRX3Y6TlS2vodUX2dwrO 7VbMeQsrc5xrYpJrcm+an5RLoP5WwVPGmc0HKnAsc3lp40FYodnMLiWnvvbsUoOc Y8lRqOeD3EZtNQHwOEQ5K/O0gH9nulP9PFG9+KMiGQHcTmrubVkKmy/q0ev1wjgN 2C72UZj1ZGhJEyJDB/iGOKtHwCkiO0fJzcfMk22leG8BSIuqWfT9iaA/x9iQuRP8 8o18zN/3jjQxm7ramI+UH/paosyOAZG00ssEfcwbs3c5LR3YJdRAGelh3wNqED7/ C8pRU4J5KEmj/mdqm8g/WyJNhvy24JLSceF3mu7TPfxJ1yV8d27SOoMPo+yZzJEt MSE41z6ZaVuQe0Kkh85sI1YbBNM7UGCxLnHn -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIGUjCCBDqgAwIBAgIIa9Kynm+Yny8wDQYJKoZIhvcNAQELBQAwgYsxCzAJBgNV BAYTAkRFMRAwDgYDVQQIEwdCYXZhcmlhMQ4wDAYDVQQHEwVHbG9ubjEWMBQGA1UE ChMNSERMLVN5bmVyZ2llczEPMA0GA1UECxMGRG9pdExMMRAwDgYDVQQDEwdlY3Mx LUNBMR8wHQYJKoZIhvcNAQkBFhBjZXJ0c0Bkb2l0bGwuY29tMB4XDTE4MTIyMzAw MDAwMFoXDTM4MTIyMjIzNTk1OVowgYsxCzAJBgNVBAYTAkRFMRAwDgYDVQQIEwdC YXZhcmlhMQ4wDAYDVQQHEwVHbG9ubjEWMBQGA1UEChMNSERMLVN5bmVyZ2llczEP MA0GA1UECxMGRG9pdExMMRAwDgYDVQQDEwdlY3MxLUNBMR8wHQYJKoZIhvcNAQkB FhBjZXJ0c0Bkb2l0bGwuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC AgEAuMXaYQVVoBxazAkDbwed/+H6CbaD7Mb93mT+Nm6mTG1DnMTuUQaV7NdsvH3U giafEpBwZTU/HEfSTyvktQEvuziRNRfrdBSzmXzrFMRA/8LBZNuRGWQtX4WjpeIH nOrjyt9NCxkcV0cyJWba8jq899XAEV7aEBjLis2lWxoRpsepRr8MqyUfyYzxOeVw iJs8K5jQcLW/SBCgs0WgGhlGtZ7/PBzuEfVEsRjdIquGdEcQyAiSOAdYkjv4k1h3 2CMmONnmddMzDsdLISng6sE0FKeqPbfejxTcKoRyxgqFk/YiOjSV/u+0nfxnhrIi MgTqRxa6f0fIG+YVjm/xnFZuo0u95Hic+0SM8UWLVzzJJYL8dN86QplqxrTKV+sU flf9lYkU36M838Lu8EdTeSKO159ppTQpBCzTlCsS+0Ks8gg9rP1LdVLCZNgXOApB PxkriKp95Cr1UuBmke+f0vKz0HOMCDFaGQFAZC+w8A0sJSpaxKfuyvlimRV7Y9i/ 21UyFh9hmRzQQf1niqLDeX1S31XugcchwnWmyxl5zQvjRpT6W43pWnDzSbkQFf+G q/ZaSOq/ZzeEM3oFqXmIlmLiYV4RrzvkN5ji/MwUTLqjHLMeRS6ovc542jbmg4fD 7pU+gGx8Ligjj0CAAdX65ZqFo3BHr0a86aCAim0fWhX6M00CAwEAAaOBtzCBtDAS BgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQWBBQd70/FyrK+D7lRvb+7YME9sn2L ZjALBgNVHQ8EBAMCAQYwOQYDVR0fBDIwMDAuoCygKoYoaHR0cDovL3d3dy5kb2l0 bGwuY29tL2NlcnRzL2VjczEtY3JsLnBlbTARBglghkgBhvhCAQEEBAMCAAcwJAYJ YIZIAYb4QgENBBcWFURvaXRMTCBJbmZyYXN0cnVjdHVyZTANBgkqhkiG9w0BAQsF AAOCAgEAambWvcF0+9IttVcLPLmrv5WLnkV6A6KVEFbZZ5uzebZ2xQcXyX7Qo7Vw eCufjuPa9mmUxxQFBCM0ePB1zdy7KG61plr1rRmN64MttR1q9JZvP/ZfkmDYntnY m0JIkghadtEJdaH6K9ZpCpGvLvdnLwIw7rUM7QWuTWbwgv+i5CmBILLdwPW7r88X caD8m+KZW8mlx0+oNp9zwpQLXSZBSDemdEwS5VSuER7W20Q8dVQak9QyQgVdOiPP 0upuSGRhXyt+K21o4kTws5R0t8ymwPVUhW14KWaC+1t3r4c0Fd22VL1anKHueZml bVDDWAXWRV3e6xIq2qvK/mob+VJ7Nn8BLciazlO4YHK8RAOsgNIKNPerTgpYDSoy 9hbtjlQFVdGqenjFGAE0fKR7jgEWfAIlqNhCJLF/lVIYJtNvRHJkrmR+1kZShUkU H7BcFpgjOKyNLNbs5b7bVaIajul+ADwkO3pskD3O18zw4STqPtNlnKzgKWTDw3c4 vC5de44aORdn17leMIeu+7NZsKKkd+A9b8LrEgYlMmA3GQLFMDATK+0YbB0oHcMs bEvho4jRuPdc6e81JZmB9UHVtfvxXV7T3Oc21hrzIPjQ4S7XPah07PafIPgbimqy UgFLiwJKnFwSGm86f8VcPblitza79WEJ+S60lWcRTN2wjMN9CZg= -----END CERTIFICATE-----
