[Pkg-gnutls-maint] Bug#403072: exim4-daemon-light fails to use equifax SSL cert/key obtained from "1&1" hosting

Felix Palmen fmp at palmen.homeip.net
Sun Dec 17 15:30:32 CET 2006


* Andreas Metzler <ametzler at downhill.at.eu.org> [20061217 12:42]:
> | gnutls_certificate_set_x509_key_file   -   Used   to   set  keys  in a
[...]
> | Currently only PKCS-1 encoded RSA and DSA private keys are accepted
> | by this function.
> 
> Some gnutls functions seem to handle PKCS-8 automatically (e.g.
> parse_pkcs12) but most of them require the stuff to be in PKCS-1
> format.

Thanks for the info. Of course this is acceptable (and requesting pkcs8
support would be a "wishlist" item). But the error message given by
gnutls is very misleading. After all, the base64 encoding of my key was
perfectly valid. This should really be changed to help users determine
what's going wrong.

Regards,
Felix

-- 
Felix M. Palmen (Zirias)  \ -PGP- <fmp at palmen.homeip.net>  /"\   ASCII Ribbon  
web: http://zirias.ath.cx/ \ http://zirias.ath.cx/pub.txt  \ / Campaign Against
my open source projects:    \ FP ED9B 62D0 BE39 32F9 2488   X    HTML In Mail  
http://zirias.ath.cx/?pg=pro \   5D0C 8177 9D80 5ECF F683  / \     And News    




More information about the Pkg-gnutls-maint mailing list