[Bug 314710] Re: ca-certificates differ from those provided by root CA

2013-09-19 Thread Michael Shuler
Closing. Downloaded upstream cert matches extracted cert, with the exception of carriage returns and no newline. mshuler@mana:~/tmp$ wget -q http://www.geotrust.com/resources/root_certificates/certificates/Equifax_Secure_Global_eBusiness_CA-1.pem mshuler@mana:~/tmp$ openssl x509 -text -noout -fi

[Bug 314710] Re: ca-certificates differ from those provided by root CA

2011-05-02 Thread Jamie Strandboge
Is this still a problem with ca-certificates (20110421) in Oneiric? This version recently got updates for all Mozilla certdata. ** Changed in: ca-certificates (Ubuntu) Status: New => Incomplete ** Changed in: ca-certificates (Ubuntu) Assignee: (unassigned) => Jamie Strandboge (jdstran

Re: [Bug 314710] Re: ca-certificates differ from those provided by root CA

2009-01-08 Thread Philipp Kern
On Thu, Jan 08, 2009 at 08:52:51AM -, Piotr Czachur wrote: > Pasting new comments from > http://sourceforge.net/forum/forum.php?thread_id=2817179&forum_id=439591 > > RE: YaSSL doesn't support certs from mozilla (New) > By: Todd Ouska (touskaProject Admin) - 2009-01-07 21:17 > Hi, > > Yes, y

[Bug 314710] Re: ca-certificates differ from those provided by root CA

2009-01-08 Thread Piotr Czachur
Pasting new comments from http://sourceforge.net/forum/forum.php?thread_id=2817179&forum_id=439591 RE: YaSSL doesn't support certs from mozilla (New) By: Todd Ouska (touskaProject Admin) - 2009-01-07 21:17 Hi, Yes, yaSSL supports PEM certificates from the Mozilla truststore. The problem I'm ge

[Bug 314710] Re: ca-certificates differ from those provided by root CA

2009-01-08 Thread Piotr Czachur
RE: YaSSL doesn't support certs from mozilla (New) By: Todd Ouska (touskaProject Admin) - 2009-01-07 21:35 Hi, Actually, looking closer at your other post on launchpad you've already identified the problem. The PEM formatting of the ubuntu provided cert is incorrect. Each line except the last

Re: [Bug 314710] Re: ca-certificates differ from those provided by root CA

2009-01-08 Thread Philipp Kern
On Wed, Jan 07, 2009 at 07:08:28PM -, Piotr Czachur wrote: > Btw. > What you mean by "so obviously it's not RFC-compliant in there"? Why certs > come from Mozilla truststore are considered to be non-RFC-compilant? As I only dump the certificate blobs from certdata.txt out of the nss CSS (Mozil

[Bug 314710] Re: ca-certificates differ from those provided by root CA

2009-01-07 Thread Piotr Czachur
I created thread concerning this issue on YaSSL developers forum: https://sourceforge.net/forum/forum.php?thread_id=2817179&forum_id=439591 -- ca-certificates differ from those provided by root CA https://bugs.launchpad.net/bugs/314710 You received this bug notification because you are a member o

[Bug 314710] Re: ca-certificates differ from those provided by root CA

2009-01-07 Thread Piotr Czachur
Hello! Point is that some applications don't support non-RFC-compliant certificates. My first *guess* is default MySQL SSL implementation - yassl - which is compiled into MySQL binary provided by MySQL, and also debian-like operating systems. Help me to decide what to do further with this issue,

[Bug 314710] Re: ca-certificates differ from those provided by root CA

2009-01-07 Thread Philipp Kern
Well, openssl reads the PEM blob just fine. In fact the blob comes verbatim from the Mozilla truststore (which is exploded into various PEM files at buildtime), so obviously it's not RFC-compliant in there. $ openssl x509 -text -noout -in /etc/ssl/certs/Equifax_Secure_Global_eBusiness_CA.pem Cer

[Bug 314710] Re: ca-certificates differ from those provided by root CA

2009-01-07 Thread Piotr Czachur
** Description changed: Binary package hint: ca-certificates Ubuntu 8.10 Package: ca-certificates 20080514-0ubuntu1.1 As example I will use just one certificate provided by package "ca- certificates", but the problem concerns more of them. Those certificates (pasted a few line

[Bug 314710] Re: ca-certificates differ from those provided by root CA

2009-01-07 Thread Piotr Czachur
** Description changed: Binary package hint: ca-certificates Ubuntu 8.10 Package: ca-certificates 20080514-0ubuntu1.1 As example I will use just one certificate provided by package "ca- certificates", but the problem concerns more of them. Those certificates (pasted a few line