Simon Josefsson dixit: >It seems alioth.debian.org is configured incorrectly, the chain it is >sending isn't sorted in the right order: […] >So I don't see any GnuTLS bug here.
Most people configuring servers are clueless. Why can’t GnuTLS sort the chain (and drop the Root CA Cert) itself, as OpenSSL appears to do (maybe to reduce support requests such as this one)? Especially, for example when you have no influence over the server in use… even if the standard mandates an order (did not check), being liberal in accepting sometimes helps. bye, //mirabilos -- FWIW, I'm quite impressed with mksh interactively. I thought it was much *much* more bare bones. But it turns out it beats the living hell out of ksh93 in that respect. I'd even consider it for my daily use if I hadn't wasted half my life on my zsh setup. :-) -- Frank Terbeck in #!/bin/mksh -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
