Public bug reported:

on an up-to-date intrepid:

$ gnutls-cli -V --x509cafile /etc/ssl/certs/ca-certificates.crt
login.launchpad.net

results in a trust failure:

- Peer's certificate is NOT trusted

(of course it doesn't tell me why...)

Whereas using OpenSSL:

$ openssl s_client -connect login.launchpad.net:443 -CAfile
/etc/ssl/certs/ca-certificates.crt

does verify and connect successfully.

I'm almost certain that this was working earlier even with intrepid, but
apparently it's failing on an unpatched intrepid now. The certs
definitely haven't expired:

$ gnutls-cli -V --x509cafile /etc/ssl/certs/ca-certificates.crt 
login.launchpad.net | grep -i expire
 # expires at: Sat May  9 13:05:40 EDT 2009
 # expires at: Sat Jun 29 13:06:20 EDT 2024
 # expires at: Sun Nov 15 20:54:37 EST 2026

** Affects: gnutls26 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
failure to trust login.launchpad.net, while openssl does
https://bugs.launchpad.net/bugs/310675
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to