Bug#747470: openssl s_client refuses to be silent
Source: openssl Severity: normal Tags: upstream Under some circumstances you want openssl s_client to be absolutely silent about what its doing. Unfortunately the -quiet option available does not suppress the verification messages of the certificate when the connection is established. Howto reproduce: openssl s_client -connect host.example.com:443 -quiet Expected behaviour: netcat with crypto and no output on stderr Actual behaviour: netcat with crypto and certificate verification messages spammed into stderr Kind regards, Benny Baumann -- System Information: Debian Release: jessie/sid APT prefers testing APT policy: (900, 'testing'), (800, 'stable'), (750, 'experimental'), (700, 'unstable'), (500, 'oldstable') Architecture: amd64 (x86_64) Kernel: Linux 3.13-1-amd64 (SMP w/8 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#747470: [Pkg-openssl-devel] Bug#747470: openssl s_client refuses to be silent
On Fri, May 09, 2014 at 08:12:58AM +0200, Benny Baumann wrote: Howto reproduce: openssl s_client -connect host.example.com:443 -quiet Expected behaviour: netcat with crypto and no output on stderr Actual behaviour: netcat with crypto and certificate verification messages spammed into stderr You do realise that s_client is a debug tool and that by default it allows any certificate? Kurt -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#747470: [Pkg-openssl-devel] Bug#747470: openssl s_client refuses to be silent
On Fri, May 09, 2014 at 07:12:13PM +0200, Benny Baumann wrote: Anyway: When I ask a tool to be silent or keep quiet I want this tool to respect this. Everything else is a bug; that simple. I'm not arging this is a bug or not. I do wonder if you know what you're doing or not. Kurt -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#747470: [Pkg-openssl-devel] Bug#747470: openssl s_client refuses to be silent
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Kurt, Am 09.05.2014 18:17, schrieb Kurt Roeckx: On Fri, May 09, 2014 at 08:12:58AM +0200, Benny Baumann wrote: Howto reproduce: openssl s_client -connect host.example.com:443 -quiet Expected behaviour: netcat with crypto and no output on stderr Actual behaviour: netcat with crypto and certificate verification messages spammed into stderr You do realise that s_client is a debug tool and that by default it allows any certificate? Yes. Nothing new you are telling. And could we now please stop arguing of WHY I'm reporting this and switch to take care of the actual bugs? TIA. Anyway: When I ask a tool to be silent or keep quiet I want this tool to respect this. Everything else is a bug; that simple. Example: If you use your hammer to get a nail into the wall you don't want that hammer to ask for confirmation before hitting your finger when you specially asked for --just-do-so mode. Kurt Kind regards, Benny Baumann. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCgAGBQJTbQxsAAoJEPHTXLno4S6t/l4QAMB8IWWLqVKLM0RF1JBH35SU aYzCBSBvAexB7OkHAbndTyc7qUlPZfygz0KvvHiwJw0F2bogU6Sh1CSKIKbi/+vq OtQxf4nljRQG9lg0Iz9n+E0lWx9+LkeF3CFhY6ohxtncT9wCYk/TI0X57WnKG1TO EBdQAVktYkZ0pXt2Uta3jKMmD1I27Jjy3rsppTssXKJoR5W44foVIpJC8WgpTexY PRvBVnNii6tJ8jUeacUZOAdTLUmZtEJnMLJy5Q6yL4Jh++5NqC4Rd8yKJOgAvYxl vNtcZW298xgfual7r/QQQAGMxyPKq2RgUcUY0bC2txRsQocCgDR6AmriPX9Gf9ZA wTJfu3uLABL+Icz+SKqN2cK7vD1UUYfjcv6JaFhCyBinOiQ9iaZBjTqs1SeaJ+wM qCnKv41swnNy9LXnajI9jPqKhvJYoPwRy328sX9HX8m38/KjsFrJs4t8ADVyHiAB 7jKhxfjH5nPRDKDsC/XqweheuvWJ2XG688B5GRDbHifYsz6Aiu5eqMKwB2hI984h K4KGjaAlWy2vMnEzUjNzpbgZ+KqwE9yNNc+HNNUizDDJen3Nje8I/f52H1UZa13T Yv1CHayJaQalTPB67F5O96BSNWV8L3L6TDMbkPM4wb6QNYkVWJXw+s+1uF1kacnL GTNr04gigF7RWKalOgAQ =fijj -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
