[Touch-packages] [Bug 1565293] Re: OpenSSL 1.0.1 fails to recognize cross-signed roots as trusted

2016-04-02 Thread Marc Deslauriers
*** This bug is a duplicate of bug 1528645 *** https://bugs.launchpad.net/bugs/1528645 Glad it's working. I didn't rehash, but that should just result in a dangling symlink which shouldn't be valid. Thanks for testing with a fresh rehash. I'll mark this bug as a dupe of 1528645. Thanks! **

[Touch-packages] [Bug 1565293] Re: OpenSSL 1.0.1 fails to recognize cross-signed roots as trusted

2016-04-02 Thread Niklas Keller
Didn't you forget to rehash the certificates? But nevertheless, it's working without the root and with a fresh rehash. Found your patch, but didn't find a bug related to the patch. Don't know whether this should be closed as invalid or duplicate. -- You received this bug notification because

[Touch-packages] [Bug 1565293] Re: OpenSSL 1.0.1 fails to recognize cross-signed roots as trusted

2016-04-02 Thread Niklas Keller
We originally encountered that issue on Travis. After I couldn't reproduce it locally on my 15.10 machine, I downloaded Ubuntu Server 14.04 and could verify it in a VM. Seems like I forgot to install the latest updates, verified it's fixed in the latest version. I'll notify the Travis team, so

[Touch-packages] [Bug 1565293] Re: OpenSSL 1.0.1 fails to recognize cross-signed roots as trusted

2016-04-02 Thread Marc Deslauriers
So it seems "Equifax Secure Certificate Authority" is still present in the latest ca-certificates package. Presumably once Mozilla removes it we will issue an updated ca-certificates package. However, removing it still allows google to validate: $ sudo rm /usr/lib/ssl/certs/Equifax_Secure_CA.pem

[Touch-packages] [Bug 1565293] Re: OpenSSL 1.0.1 fails to recognize cross-signed roots as trusted

2016-04-02 Thread Marc Deslauriers
What versions of the openssl and ca-certificates packages have you tried this on? On what release of Ubuntu? The following update removed 1024-bit certs: http://www.ubuntu.com/usn/usn-2913-1/ The following update added alternate certificate chain support to openssl:

[Touch-packages] [Bug 1565293] Re: OpenSSL 1.0.1 fails to recognize cross-signed roots as trusted

2016-04-02 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: openssl (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssl in Ubuntu.