On Fri, May 30, 2008 at 02:42:45PM +0200, Benjamin Gufler wrote: > Package: libneon27-gnutls > Version: 0.28.2-2 > Followup-For: Bug #474139 > > Hi, > > same problem on my box - when using svn, I get: > > [EMAIL PROTECTED]:~/am$ svn up > svn: PROPFIND request failed on '/repo/hb/src/am/trunk' > svn: PROPFIND of '/repo/hb/src/am/trunk': SSL negotiation failed: SSL > error: Key usage violation in certificate has been detected. > (https://***********)
There are a number of different (and most likely unrelated) issues conflated in this bug report. The "key usage violation" error can be caused by a server certificate offering an invalid certificate, see this thread: http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2789 I'm not sure why this particular issue is not seen with OpenSSL; either OpenSSL happens to choose a different ciphersuite, or it does not enforce the key usage rules as strictly. Regardless, GnuTLS is behaving correctly in rejecting the certificate in the cited case. Regards, Joe -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

