[Bug 310675] Re: failure to trust login.launchpad.net, while openssl does

[Timo Aaltonen]

closing as fixed.

** Changed in: gnutls26 (Ubuntu)
       Status: Triaged => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to gnutls26 in Ubuntu.
https://bugs.launchpad.net/bugs/310675

Title:
  failure to trust login.launchpad.net, while openssl does

Status in “gnutls26” package in Ubuntu:
  Fix Released

Bug description:
  on an up-to-date intrepid:

  $ gnutls-cli -V --x509cafile /etc/ssl/certs/ca-certificates.crt
  login.launchpad.net

  results in a trust failure:

  - Peer's certificate is NOT trusted

  (of course it doesn't tell me why...)

  Whereas using OpenSSL:

  $ openssl s_client -connect login.launchpad.net:443 -CAfile
  /etc/ssl/certs/ca-certificates.crt

  does verify and connect successfully.

  I'm almost certain that this was working earlier even with intrepid,
  but apparently it's failing on an unpatched intrepid now. The certs
  definitely haven't expired:

  $ gnutls-cli -V --x509cafile /etc/ssl/certs/ca-certificates.crt login.launchpad.net | grep -i expire
   # expires at: Sat May  9 13:05:40 EDT 2009
   # expires at: Sat Jun 29 13:06:20 EDT 2024
   # expires at: Sun Nov 15 20:54:37 EST 2026

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/310675/+subscriptions