Bug#505279: libgnutls26: segfault in _gnutls_x509_crt_get_raw_dn2

[Simon Josefsson]

Lincoln de Sousa <lincoln at alfaiati.net> writes:

> I had the same problem and I started to investigate.
>
> I got the libgnutls26 source package with apt-get source and just recompilied
> it, after that I did the following:
>
> $ export LD_PRELOAD=lib/.libs/libgnutls.so.26
> $ mutt
>
> and everything worked. weird, isn't it?

Which libgnutls26 source package did you retrieve?  Are you sure it was
the same version?  If it was the same version, maybe the build was
corrupt?

> data requested:

Because your server-name did not match with the certificate, you'll need
to provide --insecure as well.  Please try again.

/Simon

>
> lincoln at indigente:~$ gnutls-cli -p 143 mail.alfaiati.net -s
> Resolving 'mail.alfaiati.net'...
> Connecting to '72.232.18.204:143'...
>
> - Simple Client Mode:
>
> * OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2008 Double Precision, Inc.  See COPYING for distribution information.
> . STARTTLS
> . OK Begin SSL/TLS negotiation now.
> *** Starting TLS handshake
> - Certificate type: X.509
>  - Got a certificate list of 1 certificates.
>
>  - Certificate[0] info:
>  # The hostname in the certificate does NOT match 'mail.alfaiati.net'.
>
> -- 
> Lincoln de Sousa - AlfaiaTI/MinasLivre
>
> xmpp:lincoln at jabber-br.org
> http://alfaiati.net
> http://minaslivre.org
>
> +55 31 9209 4987
> -- 
> Pkg-gnutls-maint mailing list
> Pkg-gnutls-maint at lists.alioth.debian.org
> http://lists.alioth.debian.org/mailman/listinfo/pkg-gnutls-maint