Bug#744214: openconnect: PKCS#11 support broken with GnuTLS 2.12.x

2014-06-24 Thread Mike Miller
On Tue, Jun 24, 2014 at 14:28:41 +0200, Laurent Bigonville wrote: > Hello, > > Is there any plans to have this fixed for the version currently in > unstable version? Originally no, since 5.99 was supposed to be followed very closely by 6.00. So I've been waiting on that to happen. This beta has be

Bug#744214: openconnect: PKCS#11 support broken with GnuTLS 2.12.x

2014-06-24 Thread Laurent Bigonville
Hello, Is there any plans to have this fixed for the version currently in unstable version? Cheers, Laurent Bigonville -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#744214: Fix compiler warning by removing unused variable amend failure messages in gnutls.c (was: Bug#744214: openconnect: PKCS#11 support broken with GnuTLS 2.12.x)

2014-04-15 Thread Thomas Uhle
remaining changes from https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=744214 - remove unused variable in assign_privkey() to prevent compiler warning with -Wall - amend some failure messages which could otherwise be misleading - initial bug was already fixed in commit #43e514b4f53c147936a7379

Bug#744214: openconnect: PKCS#11 support broken with GnuTLS 2.12.x

2014-04-15 Thread Thomas Uhle
On Mon, 14 Apr 2014, Mike Miller wrote: Additionally, the current 5.99 package in Debian experimental is built using GnuTLS 3.x, so AFAICT this bug does not affect these packages. Can you install 5.99-2 from experimental and verify that the bug is not present? You are right, the bug is only pr

Bug#744214: openconnect: PKCS#11 support broken with GnuTLS 2.12.x

2014-04-14 Thread Mike Miller
On Sat, Apr 12, 2014 at 18:49:17 +0200, Thomas Uhle wrote: > Thank you for the immediate response! So, to cut a long story short: I have > spent some more time on debugging the code changes in gnutls.c, and you were > right. Both versions from git are failing. The bug was hiding in the code > yo

Bug#744214: openconnect: PKCS#11 support broken with GnuTLS 2.12.x

2014-04-12 Thread David Woodhouse
On Sat, 2014-04-12 at 18:49 +0200, Thomas Uhle wrote: > Eventually, the bug was found in the > function assign_privkey() (line 510), please see the attached patch. Thank you for the excellent debugging. The patch looks correct; please could I trouble you for a Signed-off-by: line as described at

Bug#744214: openconnect: PKCS#11 support broken with GnuTLS 2.12.x

2014-04-12 Thread Thomas Uhle
On Fri, 11 Apr 2014, David Woodhouse wrote: Thanks for the bug report. Please could you describe the exact failure mode? Can you provide output with '-v' both before and after the offending change? [...] Please could you confirm that building that version from git is failing, and building the

Bug#744214: openconnect: PKCS#11 support broken with GnuTLS 2.12.x

2014-04-11 Thread David Woodhouse
On Fri, 2014-04-11 at 15:05 +0200, Thomas Uhle wrote: > > The changes in gnutls.c from v5.01 to v5.02 concerning "support of CA > certificates from PKCS#11 tokens (with GnuTLS 3.2.7+)" break functionality > in openconnect at least if compiled with GnuTLS 2.12.x. Therefore, it also > affects lib

Bug#744214: openconnect: PKCS#11 support broken with GnuTLS 2.12.x

2014-04-11 Thread Thomas Uhle
Package: libopenconnect2 Version: 5.03-1 Severity: important Tags: patch upstream X-Debbugs-CC: openconnect-de...@lists.infradead.org The changes in gnutls.c from v5.01 to v5.02 concerning "support of CA certificates from PKCS#11 tokens (with GnuTLS 3.2.7+)" break functionality in openconnect a