Bug#505279: libgnutls26: segfault in _gnutls_x509_crt_get_raw_dn2

Lincoln de Sousa lincoln at alfaiati.net
Tue Nov 11 15:16:01 UTC 2008


On Tue, Nov 11, 2008 at 03:37:02PM +0100, Simon Josefsson wrote:
> Lincoln de Sousa <lincoln at alfaiati.net> writes:
> 
> > I had the same problem and I started to investigate.
> >
> > I got the libgnutls26 source package with apt-get source and just recompilied
> > it, after that I did the following:
> >
> > $ export LD_PRELOAD=lib/.libs/libgnutls.so.26
> > $ mutt
> >
> > and everything worked. weird, isn't it?
> 
> Which libgnutls26 source package did you retrieve?  Are you sure it was
> the same version?  If it was the same version, maybe the build was
> corrupt?

I think I did something wrong, after purging and installing
libgnutls26 again the problem is not happening again. I'll

> > data requested:
> 
> Because your server-name did not match with the certificate, you'll need
> to provide --insecure as well.  Please try again.

I tried in another server with the --insecure:

. OK Begin TLS negotiation now
*** Starting TLS handshake
- Successfully sent 0 certificate(s) to server.
- Certificate type: X.509
 - Got a certificate list of 1 certificates.

 - Certificate[0] info:
 # The hostname in the certificate matches 'mail.minaslivre.org'.
 # valid since: Mon Jun  2 14:19:02 BRT 2008
 # expires at: Sat Nov 29 15:19:02 BRST 2008
 # fingerprint: 00:A0:0E:B9:39:D3:8E:ED:4C:CD:81:66:72:F2:F2:3D
 # Subject's DN: C=BR,O=Minas Livre,CN=Thadeu Lima de Souza Cascardo
 # Issuer's DN: C=BR,O=Minas Livre,CN=Thadeu Lima de Souza Cascardo


- Peer's certificate issuer is unknown
- Peer's certificate is NOT trusted
- Version: TLS1.0
- Key Exchange: RSA
- Cipher: AES-128-CBC
- MAC: SHA1
- Compression: NULL

-- 
Lincoln de Sousa - AlfaiaTI/MinasLivre

xmpp:lincoln at jabber-br.org
http://alfaiati.net
http://minaslivre.org

+55 31 9209 4987
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20081111/bc407751/attachment.pgp 


More information about the Pkg-gnutls-maint mailing list