On 02/02/2016 02:22 PM, Tim Small wrote:
#813468 is similar but impacting a different application. I did come
across a patch which backports the fix included in newer versions of the
upstream OpenSSL 1.0.1 branch, to the 1.0.1k derived package in Jessie.
I haven't reviewed or tested the fix
Package: ca-certificates
Followup-For: Bug #812488
#813468 is similar but impacting a different application. I did come
across a patch which backports the fix included in newer versions of the
upstream OpenSSL 1.0.1 branch, to the 1.0.1k derived package in Jessie.
I haven't reviewed or tested
The reason for this is OpenSSL 1.0.1 being incapable of validating
cross-signed certificates, or multiple chains respectively where one
chain ends up being invalid. That latter is the case now because of the
Thawte removal in the latest ca-certificates update. We're affected by
this as well and
On Mon, Jan 25, 2016 at 08:12:03PM +0100, gregor herrmann wrote:
> On Sun, 24 Jan 2016 19:29:14 -0600, Michael Shuler wrote:
> > $ openssl s_client -CApath /etc/ssl/certs -connect api.twillio.com:443
The report is about api.twilio.com, not api.twillio.com.
It's perfectly reproducible for me,
On Sun, 24 Jan 2016 19:29:14 -0600, Michael Shuler wrote:
> >So far for a preliminary investigation; since this does not happen on
> >the libsms-send-perl side, I'm reassiging the bug to ca-certificates
> >for now.
>
> (dropped Gregor from Re - thanks for the forward)
(You're welcome, and it
On 01/24/2016 09:49 AM, gregor herrmann wrote:
On Sun, 24 Jan 2016 12:32:39 +0100, Rosario Maddox wrote:
Yesterday I did: sudo apt-get upgrade, and I have this now:
Can't send SMS: 500 Can't connect to api.twilio.com:443 (certificate
verify failed) at /usr/share/perl5/SMS/Send.pm line 270.
Package: libsms-send-perl
Version: 1.06-2
Severity: important
Dear Maintainer,
Yesterday I did: sudo apt-get upgrade, and I have this now:
Can't send SMS: 500 Can't connect to api.twilio.com:443 (certificate
verify failed) at /usr/share/perl5/SMS/Send.pm line 270.
Basically, something is wrong
Hello Michael,
Thank you for helping.
The situation is absolutely reproducible. Please see here:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812488#26
The package shall not remove files on which system depended for long
time, but it shall rather warn or ask user about it. If it is the
Control: reassign -1 ca-certificates 20141019+deb8u1
On Sun, 24 Jan 2016 12:32:39 +0100, Rosario Maddox wrote:
> Yesterday I did: sudo apt-get upgrade, and I have this now:
> Can't send SMS: 500 Can't connect to api.twilio.com:443 (certificate
> verify failed) at /usr/share/perl5/SMS/Send.pm
Hello Gregor,
Thank you, you are probably right, but I cannot locate which certificate
is missing.
> Looking at
> https://lists.debian.org/debian-announce/2016/msg1.html , the
> ca-certificates package looks like a plausible source, and its
> changelog mentions that some CA certs were
I have launched new Debian 8.2 VPS.
I could easily do this:
curl -I https://api.twilio.com
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Accept, Authorization, Content-Type, If-Match,
If-Modified-Since, If-None-Match, If-Unmodified-Since
11 matches
Mail list logo
