Public bug reported:
[Impact]
A certificate issued to allow _only_ a certain ciphersuite (e.g. RSA) gnutls
will fail with a key usage violation unless the server explicitly disables all
other ciphersuites.
[Test Case]
+ On a 12.04 system install a valid certificate supporting only RSA
+ Configure an ssl enabled website via apache2 using the above certificate
+ Run gnutls-cli <hostname>
[Regression Potential]
The fix for this was pulled from 13.04 and so far no major bugs have been filed
relating to this specific issue.
[Additional]
As stated above the attached debdiff(s) for quantal and precise were pulled
from 13.04 where the code just ignores this violation and moves on. I don't
know of a better way to handle this and perhaps someone with more knowledge
around gnutls could provide more insight.
** Affects: gnutls26 (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1207123
Title:
Key usage violation in certificate has been detected
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/1207123/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
