Public bug reported:
on an up-to-date intrepid:
$ gnutls-cli -V --x509cafile /etc/ssl/certs/ca-certificates.crt
login.launchpad.net
results in a trust failure:
- Peer's certificate is NOT trusted
(of course it doesn't tell me why...)
Whereas using OpenSSL:
$ openssl s_client -connect login.launchpad.net:443 -CAfile
/etc/ssl/certs/ca-certificates.crt
does verify and connect successfully.
I'm almost certain that this was working earlier even with intrepid, but
apparently it's failing on an unpatched intrepid now. The certs
definitely haven't expired:
$ gnutls-cli -V --x509cafile /etc/ssl/certs/ca-certificates.crt
login.launchpad.net | grep -i expire
# expires at: Sat May 9 13:05:40 EDT 2009
# expires at: Sat Jun 29 13:06:20 EDT 2024
# expires at: Sun Nov 15 20:54:37 EST 2026
** Affects: gnutls26 (Ubuntu)
Importance: Undecided
Status: New
--
failure to trust login.launchpad.net, while openssl does
https://bugs.launchpad.net/bugs/310675
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs