From news at gncellar.com  Tue Mar  1 13:48:29 2011
From: news at gncellar.com (Newsletter - Garrafeira Nacional)
Date: Tue, 1 Mar 2011 13:48:29 +0000
Subject: Merchant of the Year Award 2010 by Revista de Vinhos Magazine
Message-ID: <613ca9f45e5527cfdfca582c60ffdf44@gncellar.com>

http://mailing.gncellar.com/pub/viewemail.php?id=59fa49e05bb785d714e724db2162a6df&c=212&m_id=133807&uid=c72906d69f

   WWW.GNCELLAR.COM  
                  GNCellar receives
             Merchant of the year award
   for the 2nd  time by Revista de Vinhos magazine
   Merchant of the year award 

   Thanks for shopping with us!
   Garrafeira Nacional - Fundada em 1927 
     Share with a
   Share with a friend! 
   
     Social media
   Difundir nas redes sociais 
   

   
    <a href="http://mailing.gncellar.com/pub/goto.php?l=59fa49e05bb785d714e724db2162a6df&u=c72906d69f&c_id=29799&l_id=737&cl_id=212&m_id=133807&url=aHR0cDovL21haWxpbmcuZ25jZWxsYXIuY29tL3B1Yi9mYWNlYm9va2xpa2UucGhwP2lkPTU5ZmE0OWUwNWJiNzg1ZDcxNGU3MjRkYjIxNjJhNmRmJmM9MjEyJm1faWQ9MTMzODA3JnVpZD1jNzI5MDZkNjlm" border="0"><img src="http://mailing.gncellar.com/pub/goto.php?l=59fa49e05bb785d714e724db2162a6df&u=c72906d69f&c_id=29799&l_id=737&cl_id=212&m_id=133807&url=aHR0cDovL21haWxpbmcuZ25jZWxsYXIuY29tL3B1Yi9pbWFnZXMvZmJvb2tfbGlrZS1lbi5naWY=" border="0" alt="Facebook like"></a> 
   
   WWW.GNCELLAR.COM



http://mailing.gncellar.com/pub/goto.php?l=59fa49e05bb785d714e724db2162a6df&u=c72906d69f&c_id=29799&l_id=737&cl_id=212&m_id=133807&url=aHR0cDovL21haWxpbmcuZ25jZWxsYXIuY29tL3B1Yi9ybS5waHA/dT1jNzI5MDZkNjlmJmw9NzM3JmM9MjEyJmU9NTlmYTQ5ZTA1YmI3ODVkNzE0ZTcyNGRiMjE2MmE2ZGYmbV9pZD0xMzM4MDc=


http://mailing.gncellar.com/pub/viewemail.php?id=59fa49e05bb785d714e724db2162a6df&c=212&m_id=133807&uid=c72906d69f
http://mailing.gncellar.com/pub/recomendar.php?uid=c72906d69f&hash=59fa49e05bb785d714e724db2162a6df&c=212&m_id=133807

http://mailing.gncellar.com/pub/lista_pub_altera.php?listaID=NzM3XzIxMg==&c=212&m_id=133807&uid=c72906d69f

http://mailing.gncellar.com/pub/rm.php?u=c72906d69f&l=737&c=212&e=59fa49e05bb785d714e724db2162a6df&m_id=133807
http://mailing.gncellar.com/pub/social.php?hash=59fa49e05bb785d714e724db2162a6df&uid=c72906d69f&c=212&m_id=133807&social=facebook
http://mailing.gncellar.com/pub/social.php?hash=59fa49e05bb785d714e724db2162a6df&uid=c72906d69f&c=212&m_id=133807&social=twitter
http://mailing.gncellar.com/pub/facebooklike.php?id=59fa49e05bb785d714e724db2162a6df&c=212&m_id=133807&uid=c72906d69f

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110301/6ef72bc2/attachment.htm>

From aesw31 at gmail.com  Tue Mar  1 19:59:44 2011
From: aesw31 at gmail.com (Mr.Richards Wilson)
Date: Tue, 1 Mar 2011 11:59:44 -0800 (PST)
Subject: YOUR CONSIGNMENT BOX HAS ARRIVED  
Message-ID: <129759.42391.qm@web83911.mail.sp1.yahoo.com>



Attn: Beneficiary,

We wish to inform you that the diplomatic agent conveying the consignment box valued the sum of $5.8 Million United States Dollars,He misplaced your address andhe is currently stranded at your International airport now. We required you reconfirm thefollowing informations below so that he can deliver your consignment box to youtoday. 
NAME: ==================
ADDRESS: ===============
MOBILE NO.:=============
NAME OF YOUR NEAREST AIRPORT:========
A COPY OF YOUR IDENTIFICATION :=============== 
Please do contact the diplomatic agent with the email below with theinformations required.
Contact Person : Dr Eze Ngoli
EMAIL;( drezengoli123 at live.com)
He is waiting to hear from you today with the informations. 
NOTE : The Diplomatic agent does not know that the content of the consignmentbox is $5.8 Millions United States Dollars and on no circumstancesshould you let him know the content. The consignments was moved from here asfamily treasures, so never allow him to open the box.

Regards
Thanks.
Mr.Richards Wilson? 



      
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110301/5252a93f/attachment.htm>

From vedran.furac at gmail.com  Wed Mar  2 01:17:37 2011
From: vedran.furac at gmail.com (Vedran =?UTF-8?Q?Fura=C4=8D?=)
Date: Wed, 02 Mar 2011 02:17:37 +0100
Subject: Bug#616035: [libgnutls26] Breaks OpenLDAP with message: TLS: peer
	cert untrusted or revoked (0x402)
Message-ID: <4D6D9AB1.8030008@gmail.com>

Package: libgnutls26
Version: 2.10.4-2
Severity: grave

After the upgrade to version 2.10.4 pam authentication against OpenLDAP
fails with the following error message:

TLS: peer cert untrusted or revoked (0x402)
TLS: can't connect: (unknown error code).

Had to downgrade to 2.8.6 to be able to log in again.

Thanks,
Vedran


--- System information. ---
Architecture: amd64
Kernel:       Linux 2.6.37-1-amd64

Debian Release: wheezy/sid


--- Package information. ---
Depends            (Version) | Installed
============================-+-=============
libc6               (>= 2.3) | 2.11.2-11
libgcrypt11       (>= 1.4.2) | 1.4.6-5
libtasn1-3        (>= 1.6-0) | 2.9-2
zlib1g          (>= 1:1.1.4) | 1:1.2.3.4.dfsg-3


Package's Recommends field is empty.

Suggests        (Version) | Installed
=========================-+-===========
gnutls-bin                |




-- 
http://vedranf.net | a8e7a7783ca0d460fee090cc584adc12
-------------- next part --------------
A non-text attachment was scrubbed...
Name: vedran_furac.vcf
Type: text/x-vcard
Size: 219 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110302/6ce962e9/attachment-0001.vcf>

From noreply at release.debian.org  Wed Mar  2 16:41:45 2011
From: noreply at release.debian.org (Debian testing watch)
Date: Wed, 02 Mar 2011 16:41:45 +0000
Subject: libksba 1.1.0-2 MIGRATED to testing
Message-ID: <E1Pup7R-0004OT-Vr@franck.debian.org>

FYI: The status of the libksba source package
in Debian's testing distribution has changed.

  Previous version: 1.0.7-2
  Current version:  1.1.0-2

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See http://release.debian.org/testing-watch/ for more information.


From ametzler at downhill.at.eu.org  Wed Mar  2 18:15:57 2011
From: ametzler at downhill.at.eu.org (Andreas Metzler)
Date: Wed, 2 Mar 2011 19:15:57 +0100
Subject: Bug#616035: [libgnutls26] Breaks OpenLDAP with message: TLS: peer
	cert untrusted or revoked (0x402)
In-Reply-To: <4D6D9AB1.8030008@gmail.com>
References: <4D6D9AB1.8030008@gmail.com>
Message-ID: <20110302181557.GA2010@downhill.g.la>

# this is neither a security hole nor does it make the package
# unusable
severity 616035 important
thanks

On 2011-03-02 Vedran Fura? <vedran.furac at gmail.com> wrote:
> Package: libgnutls26
> Version: 2.10.4-2
> Severity: grave

> After the upgrade to version 2.10.4 pam authentication against OpenLDAP
> fails with the following error message:

> TLS: peer cert untrusted or revoked (0x402)
> TLS: can't connect: (unknown error code).

> Had to downgrade to 2.8.6 to be able to log in again.
[...]

Couuld you please show 
gnutls-cli --x509cafile wherever-TLS_CACERT-pointsto -p 636 ldap-server-hostname

for both 2.8.6 and 2.10.4?

thanks cu andreas




From owner at bugs.debian.org  Wed Mar  2 18:18:13 2011
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Wed, 02 Mar 2011 18:18:13 +0000
Subject: Processed: Re: Bug#616035: [libgnutls26] Breaks OpenLDAP with
	message: TLS: peer cert untrusted or revoked (0x402)
In-Reply-To: <20110302181557.GA2010@downhill.g.la>
References: <20110302181557.GA2010@downhill.g.la>
Message-ID: <handler.s.C.129908978223486.transcript@bugs.debian.org>

Processing commands for control at bugs.debian.org:

> # this is neither a security hole nor does it make the package
> # unusable
> severity 616035 important
Bug #616035 [libgnutls26] [libgnutls26] Breaks OpenLDAP with message: TLS: peer cert untrusted or revoked (0x402)
Severity set to 'important' from 'grave'

> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
616035: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=616035
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From comercial at konasexshop.com.br  Wed Mar  2 11:37:41 2011
From: comercial at konasexshop.com.br (Kona Sex Shop)
Date: Wed, 02 Mar 2011 06:37:41 -0500
Subject: =?UTF-8?B?UmV2b2x1Y2lvbmUgc3VhIHJlbGHDp8Ojbw==?=
Message-ID: <956f988aa3cbc2b03f0431c0405fe081@mkt.konasexshop.com.br>

An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110302/38b9d4a5/attachment.htm>

From vedran.furac at gmail.com  Wed Mar  2 23:28:40 2011
From: vedran.furac at gmail.com (Vedran =?UTF-8?Q?Fura=C4=8D?=)
Date: Thu, 03 Mar 2011 00:28:40 +0100
Subject: Bug#616035: [libgnutls26] Breaks OpenLDAP with message: TLS: peer
	cert untrusted or revoked (0x402)
In-Reply-To: <20110302181557.GA2010@downhill.g.la>
References: <4D6D9AB1.8030008@gmail.com> <20110302181557.GA2010@downhill.g.la>
Message-ID: <4D6ED2A8.9070005@gmail.com>

On 02.03.2011 19:15, Andreas Metzler wrote:

>> After the upgrade to version 2.10.4 pam authentication against OpenLDAP
>> fails with the following error message:
> 
>> TLS: peer cert untrusted or revoked (0x402)
>> TLS: can't connect: (unknown error code).
> 
>> Had to downgrade to 2.8.6 to be able to log in again.
> [...]
> 
> Couuld you please show 
> gnutls-cli --x509cafile wherever-TLS_CACERT-pointsto -p 636 ldap-server-hostname
> 
> for both 2.8.6 and 2.10.4?

2.8:

% gnutls-cli --x509cafile cacert.pem -p 636 canopus
Processed 1 CA certificate(s).
Resolving 'canopus'...
Connecting to '192.168.0.1:636'...
- Certificate type: X.509
 - Got a certificate list of 2 certificates.
 - Certificate[0] info:
  - subject `C=blahblah',issuer `blahblah', RSA key 2048 bits, signed
using RSA-SHA, activated `2006-07-26 17:16:08 UTC', expires `2012-07-24
17:16:08 UTC', SHA-1 fingerprint `745024f9629444bd04bbd570e05a0b0d2e3fd662'

 - Certificate[1] info:
  - subject `blahblah', issuer `blahblah', RSA key 1024 bits, signed
using RSA-SHA, activated `2006-07-22 12:59:58 UTC', expires `2009-07-21
12:59:58 UTC', SHA-1 fingerprint `ec5248b3194be9fda5639b59458962bc9bee32cc'
- The hostname in the certificate matches 'canopus'.
- Peer's certificate is trusted
- Version: TLS1.1
- Key Exchange: RSA
- Cipher: AES-256-CBC
- MAC: SHA1
- Compression: NULL
- Handshake was completed

- Simple Client Mode:
^C

2.10:

# gnutls-cli --x509cafile cacert.pem -p 636 canopus
Processed 1 CA certificate(s).
Resolving 'canopus'...
Connecting to '192.168.0.1:636'...
*** Verifying server certificate failed...
*** Fatal error: Error in the certificate.
*** Handshake has failed
GnuTLS error: Error in the certificate


Regards,
Vedran


-- 
http://vedranf.net | a8e7a7783ca0d460fee090cc584adc12
-------------- next part --------------
A non-text attachment was scrubbed...
Name: vedran_furac.vcf
Type: text/x-vcard
Size: 219 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110303/9c3338a2/attachment-0001.vcf>

From SFR_Business_Team at e-marketing-canal.com  Wed Mar  2 14:36:02 2011
From: SFR_Business_Team at e-marketing-canal.com (SFR Business Team)
Date: Wed, 2 Mar 2011 15:36:02 +0100
Subject: 3 mois d'abonnement offerts avec le Pack SFR Business Team
Message-ID: <24e81d46312dbb9dfd9501ead723b410@e-marketing-canal.com>

Pour visualiser et se d?sabonner ce message,
 
Veuillez, copier puis coller, l'adresse URL compl?te ci-dessous dans la
barre d'adresse de votre navigateur et appuyer sur la touche "Entr?e" de
votre clavier.



- - - - - - - - - - - - - - - - - 

http://app.e-marketing-canal.com/v/?camp=12099662497_2&ms=cGtnLWdudXRscy1tYWludEBsaXN0cy5hbGlvdGguZGViaWFuLm9yZw==

- - - - - - - - - - - - - - - - - 



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110302/53520017/attachment.htm>

From n.mavrogiannopoulos at gmail.com  Thu Mar  3 09:00:17 2011
From: n.mavrogiannopoulos at gmail.com (Nikos Mavrogiannopoulos)
Date: Thu, 3 Mar 2011 10:00:17 +0100
Subject: Bug#616035: [libgnutls26] Breaks OpenLDAP with message: TLS: peer
	cert untrusted
Message-ID: <AANLkTim6mF_6Kq=mWg5vMM+ugm+SDdbge98rQgXwAFDU@mail.gmail.com>

Hello,
 Could you send the certificate in question (not the private key, just
the certificate), or if not possible provide a -d2 output?

regards,
Nikos




From simon at josefsson.org  Thu Mar  3 08:57:25 2011
From: simon at josefsson.org (Simon Josefsson)
Date: Thu, 03 Mar 2011 09:57:25 +0100
Subject: Bug#616035: [libgnutls26] Breaks OpenLDAP with message: TLS: peer
	cert untrusted or revoked (0x402)
In-Reply-To: <4D6ED2A8.9070005@gmail.com> ("Vedran =?UTF-8?Q?Fura=C4=8D?="'s
	message of "Thu, 03 Mar 2011 00:28:40 +0100")
References: <4D6D9AB1.8030008@gmail.com> <20110302181557.GA2010@downhill.g.la>
	<4D6ED2A8.9070005@gmail.com>
Message-ID: <87pqq8mvii.fsf@latte.josefsson.org>

Vedran Fura? <vedran.furac at gmail.com> writes:

>   - subject `blahblah', issuer `blahblah', RSA key 1024 bits, signed
> using RSA-SHA, activated `2006-07-22 12:59:58 UTC', expires `2009-07-21
> 12:59:58 UTC', SHA-1 fingerprint `ec5248b3194be9fda5639b59458962bc9bee32cc'

Looks like one of certs had expired?  Please re-run with '-d 4711 -V' to
get more information.  You removed the subject/issuer names so I cannot
tell if that is the trusted root CA cert or an intermediate cert.  If it
is an intermediate untrusted cert, the error is expected.

/Simon




From n.mavrogiannopoulos at gmail.com  Thu Mar  3 09:14:36 2011
From: n.mavrogiannopoulos at gmail.com (Nikos Mavrogiannopoulos)
Date: Thu, 3 Mar 2011 10:14:36 +0100
Subject: Bug#616035: [libgnutls26] Breaks OpenLDAP with message: TLS: peer
	cert untrusted or revoked (0x402)
Message-ID: <AANLkTinhpJ6am3ASo2FFXmvirM9YV6S4njudWy=cTKR_@mail.gmail.com>

btw. the 0x402 error code indicates an expired certificate.

regards,
Nikos




From odon.claire at yahoo.fr  Thu Mar  3 10:10:08 2011
From: odon.claire at yahoo.fr (Mme vigier isabelle)
Date: Thu, 3 Mar 2011 10:10:08 +0000 (GMT)
Subject: Bonjour
Message-ID: <261543.1224.qm@web24904.mail.ird.yahoo.com>



Bonjour
Je m'excuse pour cette intrusion, je me nomme VIGIER ISABELLE n?e le 27 JUILLET 1963 originaire de la France.Ex consultante au B?nin pr?s de la FRANCE d'o? j'ai servis pendant 9 ans .J'ai d? vous contacter de cette sorte parce que je souhaite faire une chose tr?s importante. Cela vous semblera un peu suspect bien vrais que vous ne me connaissez pas et que je ne vous connais pas. Je souffre d'un cancer du cerveau qui est en phase terminale, mon m?decin traitant vient de m'informer que mes jours sont compt?s du fait de mon ?tat de sant? d?grad?. Selon ce que le Docteur m'a justifi? une Boule s'installe pr?sentement dans ma cage c?r?brale , j'ai cette maladie depuis plus de 4 ans. Je suis veuve et je n'ai pas d'enfant.
J'envisage de faire une donation de tous mes biens. J'ai presque vendu mes affaires dont une compagnie d'exportation de bois au Canada ou je vis depuis pr?s de 30 ans, une partie de tout cet argent sera vers? ? diff?rentes associations, et des centres d'aide au orphelins et aux sans abri. Je ne sais pas dans quel domaine d'activit? vous exercez mais je souhaiterais vous aider. J'ai en ce moment dans mon compte personnel compte bloqu?, la somme de 1.000.000 D'euro que j'avais garder pour un projet de construction. Je serai gr?e de vous donner cet argent qui pourra vous aider dans votre entreprise, je vous prie d'accepter cela car c'est un don que je vous fait et cela sans rien demander en retour.

Je souffre ?norm?ment et j'ai tr?s peur, je n'arrive presque pas a dormir la nuit comme la journ?e car je ne veux pas mourir sans avoir fait don de tout cet argent sinon je pense que cela serait un g?chis.
Veuillez me contactez d?s que possible si vous ?tes d'accord pour mon offre.
Que la paix du seigneur sois avec vous

Mme VIGIER ISABELLE


      
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110303/2850dec3/attachment.htm>

From gcol0004 at att.net  Fri Mar  4 11:31:51 2011
From: gcol0004 at att.net (george colley)
Date: Fri, 4 Mar 2011 03:31:51 -0800 (PST)
Subject: No subject
Message-ID: <317135.13878.qm@web181401.mail.ne1.yahoo.com>



Dear Friend,



My name is George Colley I have a confidential business proposal which will be beneficial to the two of us. This has to do with a late client of our bank who died intestate (without a will) leaving behind a huge sum of money. The bank has mandated me to look for the next of kin of the dead client to claim funds as the new beneficiary. However the search has not yielded anything since all the relatives of the dead client died along with him ten years ago. Since the funds will revert to the ownership of the state in seven days time, I have decided to present you to the bank as the next of kin to the dead client.

If you find the above acceptable kindly get back to me with the following details

Full Name, Telephone, and Occupation for full and comprehensive details about this proposal.



Sincere Regards,



George Colley
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110304/49f91a4b/attachment.htm>

From news at garrafeiranacional.com  Fri Mar  4 23:10:41 2011
From: news at garrafeiranacional.com (Newsletter - Garrafeira Nacional)
Date: Fri, 4 Mar 2011 23:10:41 +0000
Subject: Garrafeira Nacional - Weekly specials
Message-ID: <d775dd021ab1cdd21eb1f7aefc950966@gncellar.com>

http://mailing.gncellar.com/pub/viewemail.php?id=dfa83a2edde6e0b558ed59877ba8cbb0&c=212&m_id=135289&uid=c72906d69f
http://mailing.gncellar.com/pub/recomendar.php?uid=c72906d69f&hash=dfa83a2edde6e0b558ed59877ba8cbb0&c=212&m_id=135289

http://mailing.gncellar.com/pub/rm.php?u=c72906d69f&l=737&c=212&e=dfa83a2edde6e0b558ed59877ba8cbb0&m_id=135289



    | NEWSLETTER | WWW.GARRAFEIRANACIONAL.COM
   
   VERS??O PORTUGUESA  
   
   
     SPECIAL
   OFFERS
   
   
   15,95 EUR (including VAT)
      Firewater Av?? 0.50cl
            
   
   
   6,70 EUR (including VAT)
    Jerez Sandeman Dry Seco
            
   
   
   49,50 EUR (including VAT)
     Vodka Ed Hardy 1 Liter
            
   
   
   26,40 EUR (including VAT)
          Gin Bulldog
            
   
   
        46,40 EUR (including VAT)
   Rum Havana Club Barrel Proof 1 Liter
                 
   
   
    20,30 EUR (including VAT)
   Carinus Est Chocolate 0.50cl
             
    

   
   
   Send to a:
   
   
   Share on my:
    
   

                 
            <a href="http://mailing.gncellar.com/pub/goto.php?l=dfa83a2edde6e0b558ed59877ba8cbb0&u=c72906d69f&c_id=29809&l_id=737&cl_id=212&m_id=135289&url=aHR0cDovL21haWxpbmcuZ25jZWxsYXIuY29tL3B1Yi9mYWNlYm9va2xpa2UucGhwP2lkPWRmYTgzYTJlZGRlNmUwYjU1OGVkNTk4NzdiYThjYmIwJmM9MjEyJm1faWQ9MTM1Mjg5JnVpZD1jNzI5MDZkNjlm" border="0"><img src="http://mailing.gncellar.com/pub/goto.php?l=dfa83a2edde6e0b558ed59877ba8cbb0&u=c72906d69f&c_id=29809&l_id=737&cl_id=212&m_id=135289&url=aHR0cDovL21haWxpbmcuZ25jZWxsYXIuY29tL3B1Yi9pbWFnZXMvZmJvb2tfbGlrZS1lbi5naWY=" border="0" alt="Facebook like"></a>
            
   WWW.GARRAFEIRANACIONAL.COM


http://mailing.gncellar.com/pub/viewemail.php?id=dfa83a2edde6e0b558ed59877ba8cbb0&c=212&m_id=135289&uid=c72906d69f
http://mailing.gncellar.com/pub/recomendar.php?uid=c72906d69f&hash=dfa83a2edde6e0b558ed59877ba8cbb0&c=212&m_id=135289

http://mailing.gncellar.com/pub/rm.php?u=c72906d69f&l=737&c=212&e=dfa83a2edde6e0b558ed59877ba8cbb0&m_id=135289

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110304/b9bb583b/attachment-0001.htm>

From ftpmaster at ftp-master.debian.org  Sat Mar  5 13:27:55 2011
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Sat, 05 Mar 2011 13:27:55 +0000
Subject: Processing of libksba_1.2.0-1_i386.changes
Message-ID: <E1PvrWV-0004wP-7r@franck.debian.org>

libksba_1.2.0-1_i386.changes uploaded successfully to localhost
along with the files:
  libksba_1.2.0-1.dsc
  libksba_1.2.0.orig.tar.bz2
  libksba_1.2.0-1.debian.tar.gz
  libksba-dev_1.2.0-1_i386.deb
  libksba8_1.2.0-1_i386.deb

Greetings,

	Your Debian queue daemon (running on host franck.debian.org)


From ftpmaster at ftp-master.debian.org  Sat Mar  5 13:33:07 2011
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Sat, 05 Mar 2011 13:33:07 +0000
Subject: libksba_1.2.0-1_i386.changes ACCEPTED into unstable
Message-ID: <E1PvrbX-0005dI-UO@franck.debian.org>




Accepted:
libksba-dev_1.2.0-1_i386.deb
  to main/libk/libksba/libksba-dev_1.2.0-1_i386.deb
libksba8_1.2.0-1_i386.deb
  to main/libk/libksba/libksba8_1.2.0-1_i386.deb
libksba_1.2.0-1.debian.tar.gz
  to main/libk/libksba/libksba_1.2.0-1.debian.tar.gz
libksba_1.2.0-1.dsc
  to main/libk/libksba/libksba_1.2.0-1.dsc
libksba_1.2.0.orig.tar.bz2
  to main/libk/libksba/libksba_1.2.0.orig.tar.bz2


Override entries for your package:
libksba-dev_1.2.0-1_i386.deb - optional libdevel
libksba8_1.2.0-1_i386.deb - optional libs
libksba_1.2.0-1.dsc - source libs

Announcing to debian-devel-changes at lists.debian.org


Thank you for your contribution to Debian.


From sandraericco at att.net  Sun Mar  6 05:42:45 2011
From: sandraericco at att.net (Sandra eric)
Date: Sat, 5 Mar 2011 21:42:45 -0800 (PST)
Subject: hello 
Message-ID: <41071.57186.qm@web181220.mail.ne1.yahoo.com>

hello




?my name is 
Sandra Yarima, i hope you are doin fine ,i really like to associate with
 ?? people? from your country because true friendship is not distance, 
colour or? age ,so i seek for true friendship with you ,please if you dont mind i will like




?you to reply my mail , so i can send you my picture




?and tell you more about me,




? thanks

?Sandra
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110305/374093e3/attachment.htm>

From vedran.furac at gmail.com  Mon Mar  7 23:04:57 2011
From: vedran.furac at gmail.com (Vedran =?UTF-8?Q?Fura=C4=8D?=)
Date: Tue, 08 Mar 2011 00:04:57 +0100
Subject: Bug#616035: [libgnutls26] Breaks OpenLDAP with message: TLS: peer
	cert untrusted or revoked (0x402)
In-Reply-To: <87pqq8mvii.fsf@latte.josefsson.org>
References: <4D6D9AB1.8030008@gmail.com>
	<20110302181557.GA2010@downhill.g.la>	<4D6ED2A8.9070005@gmail.com>
	<87pqq8mvii.fsf@latte.josefsson.org>
Message-ID: <4D756499.2060502@gmail.com>

On 03.03.2011 09:57, Simon Josefsson wrote:

> Vedran Fura? <vedran.furac at gmail.com> writes:
> 
>>   - subject `blahblah', issuer `blahblah', RSA key 1024 bits, signed
>> using RSA-SHA, activated `2006-07-22 12:59:58 UTC', expires `2009-07-21
>> 12:59:58 UTC', SHA-1 fingerprint `ec5248b3194be9fda5639b59458962bc9bee32cc'
> 
> Looks like one of certs had expired? 

That could be the problem, but that would indicate a bug in the all
previous versions of gnutls. Also note that same certificate works with
apache, postfix, dovecot,... and their clients (firefox, thunderbird,...).

> Please re-run with '-d 4711 -V' to
> get more information.  You removed the subject/issuer names so I cannot
> tell if that is the trusted root CA cert or an intermediate cert.  If it
> is an intermediate untrusted cert, the error is expected.

It's a self-signed certificate with more/less dummy data. I can't send it.

...
|<7>| RB: Requested 1923 bytes
|<4>| REC[0xc8cfd0]: Decrypted Packet[1] Handshake(22) with length: 1918
|<6>| BUF[HSK]: Inserted 1918 bytes of Data(22)
|<6>| BUF[REC][HD]: Read 1 bytes of Data(22)
|<6>| BUF[REC][HD]: Read 3 bytes of Data(22)
|<3>| HSK[0xc8cfd0]: CERTIFICATE was received [1918 bytes]
|<6>| BUF[REC][HD]: Read 1914 bytes of Data(22)
|<6>| BUF[HSK]: Peeked 231 bytes of Data
|<6>| BUF[HSK]: Emptied buffer
|<6>| BUF[HSK]: Inserted 4 bytes of Data
|<6>| BUF[HSK]: Inserted 1914 bytes of Data
|<2>| ASSERT: mpi.c:606
|<2>| ASSERT: dn.c:1211
*** Verifying server certificate failed...
|<2>| ASSERT: gnutls_kx.c:736
|<2>| ASSERT: gnutls_handshake.c:2804
|<6>| BUF[HSK]: Cleared Data from buffer
*** Fatal error: Error in the certificate.
|<4>| REC: Sending Alert[2|42] - Certificate is bad
|<4>| REC[0xc8cfd0]: Sending Packet[1] Alert(21) with length: 2
|<7>| WRITE: Will write 7 bytes to 0x4.
|<7>| WRITE: wrote 7 bytes to 0x4. Left 0 bytes. Total 7 bytes.
|<7>| 0000 - 15 03 02 00 02 02 2a
|<4>| REC[0xc8cfd0]: Sent Packet[2] Alert(21) with length: 7
*** Handshake has failed
GnuTLS error: Error in the certificate.


Regards,
Vedran
-------------- next part --------------
A non-text attachment was scrubbed...
Name: vedran_furac.vcf
Type: text/x-vcard
Size: 210 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110308/8048571a/attachment.vcf>

From n.mavrogiannopoulos at gmail.com  Wed Mar  9 09:21:01 2011
From: n.mavrogiannopoulos at gmail.com (Nikos Mavrogiannopoulos)
Date: Wed, 9 Mar 2011 10:21:01 +0100
Subject: Bug#616035: [libgnutls26] Breaks OpenLDAP with message: TLS: peer
	cert untrusted or revoked (0x402)
In-Reply-To: <4D756499.2060502@gmail.com>
References: <4D6D9AB1.8030008@gmail.com> <20110302181557.GA2010@downhill.g.la>
	<4D6ED2A8.9070005@gmail.com> <87pqq8mvii.fsf@latte.josefsson.org>
	<4D756499.2060502@gmail.com>
Message-ID: <AANLkTin-SJFe9wh3VzKRVVa2WX3uX9hCOQi8TaH7Ce+j@mail.gmail.com>

2011/3/8 Vedran Fura? <vedran.furac at gmail.com>:

>>> ? - subject `blahblah', issuer `blahblah', RSA key 1024 bits, signed
>>> using RSA-SHA, activated `2006-07-22 12:59:58 UTC', expires `2009-07-21
>>> 12:59:58 UTC', SHA-1 fingerprint `ec5248b3194be9fda5639b59458962bc9bee32cc'
>> Looks like one of certs had expired?
>
> That could be the problem, but that would indicate a bug in the all
> previous versions of gnutls.

The expiration checking had to be explicitly done by the application using
gnutls in the previous version. Implicit checking by gnutls was added in 2.8.x.

> Also note that same certificate works with
> apache, postfix, dovecot,... and their clients (firefox, thunderbird,...).

I don't understand your point. Is the certificate expired or not?

regards,
Nikos




From vedran.furac at gmail.com  Thu Mar 10 03:14:20 2011
From: vedran.furac at gmail.com (Vedran =?UTF-8?Q?Fura=C4=8D?=)
Date: Thu, 10 Mar 2011 04:14:20 +0100
Subject: Bug#616035: [libgnutls26] Breaks OpenLDAP with message: TLS: peer
	cert untrusted or revoked (0x402)
In-Reply-To: <AANLkTin-SJFe9wh3VzKRVVa2WX3uX9hCOQi8TaH7Ce+j@mail.gmail.com>
References: <4D6D9AB1.8030008@gmail.com>	<20110302181557.GA2010@downhill.g.la>	<4D6ED2A8.9070005@gmail.com>	<87pqq8mvii.fsf@latte.josefsson.org>	<4D756499.2060502@gmail.com>
	<AANLkTin-SJFe9wh3VzKRVVa2WX3uX9hCOQi8TaH7Ce+j@mail.gmail.com>
Message-ID: <4D78420C.6030305@gmail.com>

On 09.03.2011 10:21, Nikos Mavrogiannopoulos wrote:

> 2011/3/8 Vedran Fura? <vedran.furac at gmail.com>:
> 
>>>>   - subject `blahblah', issuer `blahblah', RSA key 1024 bits, signed
>>>> using RSA-SHA, activated `2006-07-22 12:59:58 UTC', expires `2009-07-21
>>>> 12:59:58 UTC', SHA-1 fingerprint `ec5248b3194be9fda5639b59458962bc9bee32cc'
>>> Looks like one of certs had expired?
>>
>> That could be the problem, but that would indicate a bug in the all
>> previous versions of gnutls.
> 
> The expiration checking had to be explicitly done by the application using
> gnutls in the previous version. Implicit checking by gnutls was added in 2.8.x.

2.8? But it works for me in 2.8.6, something is changed in 2.10.x.

> I don't understand your point. Is the certificate expired or not?

Sure, it's expired, but gnutls fails to detect that and is blabbing about:

TLS: peer cert untrusted or revoked (0x402)
TLS: can't connect: (unknown error code).

or

GnuTLS error: Error in the certificate.

While it should:

# grep -Ri expire /tmp/gnutls26-2.10.5/src

/tmp/gnutls26-2.10.5/src/common.c:    if (status & GNUTLS_CERT_EXPIRED)
/tmp/gnutls26-2.10.5/src/common.c:      printf ("- Peer's certificate
chain uses expired certificate\n");

I had to make this work asap so I tried to generate new certificate. I
know I previously used openssl to generate self-signed certificate, but
unfortunately I forgot to document the procedure (as certs generated
using standard method do not work (another, imho, bug)). So I used
certtool following steps from:

http://wiki.debian.org/LDAP/OpenLDAPSetup

I had to remove TLSCACertificateFile and have updated TLS_REQCERT in
ldap.conf from "demand" to "allow". Wiki says to use TLS_REQCERT never,
but that's plain wrong as the client will not request or check any
server certificate with that setting.

Regards,
Vedran


-- 
http://vedranf.net | a8e7a7783ca0d460fee090cc584adc12
-------------- next part --------------
A non-text attachment was scrubbed...
Name: vedran_furac.vcf
Type: text/x-vcard
Size: 219 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110310/d9312ba9/attachment.vcf>

From n.mavrogiannopoulos at gmail.com  Thu Mar 10 07:54:38 2011
From: n.mavrogiannopoulos at gmail.com (Nikos Mavrogiannopoulos)
Date: Thu, 10 Mar 2011 08:54:38 +0100
Subject: Bug#616035: [libgnutls26] Breaks OpenLDAP with message: TLS: peer
	cert untrusted or revoked (0x402)
In-Reply-To: <4D78420C.6030305@gmail.com>
References: <4D6D9AB1.8030008@gmail.com>	<20110302181557.GA2010@downhill.g.la>	<4D6ED2A8.9070005@gmail.com>	<87pqq8mvii.fsf@latte.josefsson.org>	<4D756499.2060502@gmail.com>
	<AANLkTin-SJFe9wh3VzKRVVa2WX3uX9hCOQi8TaH7Ce+j@mail.gmail.com>
	<4D78420C.6030305@gmail.com>
Message-ID: <4D7883BE.30904@gmail.com>

On 03/10/2011 04:14 AM, Vedran Fura? wrote:

>>>>>   - subject `blahblah', issuer `blahblah', RSA key 1024 bits, signed
>>>>> using RSA-SHA, activated `2006-07-22 12:59:58 UTC', expires `2009-07-21
>>>>> 12:59:58 UTC', SHA-1 fingerprint `ec5248b3194be9fda5639b59458962bc9bee32cc'
>>>> Looks like one of certs had expired?
>>>
>>> That could be the problem, but that would indicate a bug in the all
>>> previous versions of gnutls.
>>
>> The expiration checking had to be explicitly done by the application using
>> gnutls in the previous version. Implicit checking by gnutls was added in 2.8.x.
> 2.8? But it works for me in 2.8.6, something is changed in 2.10.x.

The change in 2.10 was that the intermediate and CA certificates are
being checked for expiration as well.

>> I don't understand your point. Is the certificate expired or not?
> Sure, it's expired, but gnutls fails to detect that and is blabbing about:
> 
> TLS: peer cert untrusted or revoked (0x402)
> TLS: can't connect: (unknown error code).
> or
> GnuTLS error: Error in the certificate.

gnutls is a library it doesn't print anything. This is an application issue.


regards,
Nikos




From ftpmaster at ftp-master.debian.org  Thu Mar 10 11:25:43 2011
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Thu, 10 Mar 2011 11:25:43 +0000
Subject: Processing of gnutls26_2.11.7-1_i386.changes
Message-ID: <E1Pxdzz-0005zL-9a@franck.debian.org>

gnutls26_2.11.7-1_i386.changes uploaded successfully to localhost
along with the files:
  gnutls26_2.11.7-1.dsc
  gnutls26_2.11.7.orig.tar.bz2
  gnutls26_2.11.7-1.debian.tar.gz
  gnutls-doc_2.11.7-1_all.deb
  libgnutls-dev_2.11.7-1_i386.deb
  libgnutls26_2.11.7-1_i386.deb
  libgnutls26-dbg_2.11.7-1_i386.deb
  gnutls-bin_2.11.7-1_i386.deb
  guile-gnutls_2.11.7-1_i386.deb
  libgnutlsxx27_2.11.7-1_i386.deb

Greetings,

	Your Debian queue daemon (running on host franck.debian.org)


From ftpmaster at ftp-master.debian.org  Thu Mar 10 11:48:46 2011
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Thu, 10 Mar 2011 11:48:46 +0000
Subject: gnutls26_2.11.7-1_i386.changes ACCEPTED into experimental
Message-ID: <E1PxeMI-0008UR-4u@franck.debian.org>




Accepted:
gnutls-bin_2.11.7-1_i386.deb
  to main/g/gnutls26/gnutls-bin_2.11.7-1_i386.deb
gnutls-doc_2.11.7-1_all.deb
  to main/g/gnutls26/gnutls-doc_2.11.7-1_all.deb
gnutls26_2.11.7-1.debian.tar.gz
  to main/g/gnutls26/gnutls26_2.11.7-1.debian.tar.gz
gnutls26_2.11.7-1.dsc
  to main/g/gnutls26/gnutls26_2.11.7-1.dsc
gnutls26_2.11.7.orig.tar.bz2
  to main/g/gnutls26/gnutls26_2.11.7.orig.tar.bz2
guile-gnutls_2.11.7-1_i386.deb
  to main/g/gnutls26/guile-gnutls_2.11.7-1_i386.deb
libgnutls-dev_2.11.7-1_i386.deb
  to main/g/gnutls26/libgnutls-dev_2.11.7-1_i386.deb
libgnutls26-dbg_2.11.7-1_i386.deb
  to main/g/gnutls26/libgnutls26-dbg_2.11.7-1_i386.deb
libgnutls26_2.11.7-1_i386.deb
  to main/g/gnutls26/libgnutls26_2.11.7-1_i386.deb
libgnutlsxx27_2.11.7-1_i386.deb
  to main/g/gnutls26/libgnutlsxx27_2.11.7-1_i386.deb


Override entries for your package:
gnutls-bin_2.11.7-1_i386.deb - optional net
gnutls-doc_2.11.7-1_all.deb - optional doc
gnutls26_2.11.7-1.dsc - source devel
guile-gnutls_2.11.7-1_i386.deb - optional lisp
libgnutls-dev_2.11.7-1_i386.deb - optional libdevel
libgnutls26-dbg_2.11.7-1_i386.deb - extra debug
libgnutls26_2.11.7-1_i386.deb - standard libs
libgnutlsxx27_2.11.7-1_i386.deb - extra libs

Announcing to debian-devel-changes at lists.debian.org


Thank you for your contribution to Debian.


From vedran.furac at gmail.com  Thu Mar 10 21:57:01 2011
From: vedran.furac at gmail.com (Vedran =?UTF-8?Q?Fura=C4=8D?=)
Date: Thu, 10 Mar 2011 22:57:01 +0100
Subject: Bug#616035: [libgnutls26] Breaks OpenLDAP with message: TLS: peer
	cert untrusted or revoked (0x402)
In-Reply-To: <4D7883BE.30904@gmail.com>
References: <4D6D9AB1.8030008@gmail.com>	<20110302181557.GA2010@downhill.g.la>	<4D6ED2A8.9070005@gmail.com>	<87pqq8mvii.fsf@latte.josefsson.org>	<4D756499.2060502@gmail.com>
	<AANLkTin-SJFe9wh3VzKRVVa2WX3uX9hCOQi8TaH7Ce+j@mail.gmail.com>
	<4D78420C.6030305@gmail.com> <4D7883BE.30904@gmail.com>
Message-ID: <4D79492D.4090304@gmail.com>

On 10.03.2011 08:54, Nikos Mavrogiannopoulos wrote:

> On 03/10/2011 04:14 AM, Vedran Fura? wrote:
> 
>>>>>>   - subject `blahblah', issuer `blahblah', RSA key 1024 bits, signed
>>>>>> using RSA-SHA, activated `2006-07-22 12:59:58 UTC', expires `2009-07-21
>>>>>> 12:59:58 UTC', SHA-1 fingerprint `ec5248b3194be9fda5639b59458962bc9bee32cc'
>>>>> Looks like one of certs had expired?
>>>>
>>>> That could be the problem, but that would indicate a bug in the all
>>>> previous versions of gnutls.
>>>
>>> The expiration checking had to be explicitly done by the application using
>>> gnutls in the previous version. Implicit checking by gnutls was added in 2.8.x.
>> 2.8? But it works for me in 2.8.6, something is changed in 2.10.x.
> 
> The change in 2.10 was that the intermediate and CA certificates are
> being checked for expiration as well.

OK, that would explain it.

>>> I don't understand your point. Is the certificate expired or not?
>> Sure, it's expired, but gnutls fails to detect that and is blabbing about:
>>
>> TLS: peer cert untrusted or revoked (0x402)
>> TLS: can't connect: (unknown error code).
>> or
>> GnuTLS error: Error in the certificate.
> 
> gnutls is a library it doesn't print anything. This is an application issue.

Fine then, the latter (GnuTLS error: Error in the certificate.) is the
output of gnutls-cli, bug is there then.

Anyway, you can close the report.


Regards,
Vedran
-------------- next part --------------
A non-text attachment was scrubbed...
Name: vedran_furac.vcf
Type: text/x-vcard
Size: 219 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110310/efbc0967/attachment.vcf>

From comercial at konasexshop.com.br  Fri Mar 11 03:10:16 2011
From: comercial at konasexshop.com.br (Kona Sex Shop)
Date: Thu, 10 Mar 2011 22:10:16 -0500
Subject: =?UTF-8?B?RMOqIGFzYXMgw6BzIHN1YXMgZmFudGFzaWFz?=
Message-ID: <66573d4e03c0728a45c604c883311770@mkt.konasexshop.com.br>

An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110310/e70eb6fb/attachment.htm>

From noreply at release.debian.org  Fri Mar 11 16:39:20 2011
From: noreply at release.debian.org (Debian testing watch)
Date: Fri, 11 Mar 2011 16:39:20 +0000
Subject: gnutls26 2.10.5-1 MIGRATED to testing
Message-ID: <E1Py5N2-0007pH-A8@franck.debian.org>

FYI: The status of the gnutls26 source package
in Debian's testing distribution has changed.

  Previous version: 2.10.4-2
  Current version:  2.10.5-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See http://release.debian.org/testing-watch/ for more information.


From ftpmaster at ftp-master.debian.org  Fri Mar 11 17:01:54 2011
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Fri, 11 Mar 2011 17:01:54 +0000
Subject: Processing of gnutls26_2.11.7-2_i386.changes
Message-ID: <E1Py5is-0004gM-PM@franck.debian.org>

gnutls26_2.11.7-2_i386.changes uploaded successfully to localhost
along with the files:
  gnutls26_2.11.7-2.dsc
  gnutls26_2.11.7-2.debian.tar.gz
  gnutls-doc_2.11.7-2_all.deb
  libgnutls-dev_2.11.7-2_i386.deb
  libgnutls26_2.11.7-2_i386.deb
  libgnutls26-dbg_2.11.7-2_i386.deb
  gnutls-bin_2.11.7-2_i386.deb
  guile-gnutls_2.11.7-2_i386.deb
  libgnutlsxx27_2.11.7-2_i386.deb
  libgnutls-openssl27_2.11.7-2_i386.deb

Greetings,

	Your Debian queue daemon (running on host franck.debian.org)


From ftpmaster at ftp-master.debian.org  Fri Mar 11 17:18:58 2011
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Fri, 11 Mar 2011 17:18:58 +0000
Subject: gnutls26_2.11.7-2_i386.changes is NEW
Message-ID: <E1Py5zO-0008MC-1d@franck.debian.org>

gnutls-bin_2.11.7-2_i386.deb
  to main/g/gnutls26/gnutls-bin_2.11.7-2_i386.deb
gnutls-doc_2.11.7-2_all.deb
  to main/g/gnutls26/gnutls-doc_2.11.7-2_all.deb
gnutls26_2.11.7-2.debian.tar.gz
  to main/g/gnutls26/gnutls26_2.11.7-2.debian.tar.gz
gnutls26_2.11.7-2.dsc
  to main/g/gnutls26/gnutls26_2.11.7-2.dsc
guile-gnutls_2.11.7-2_i386.deb
  to main/g/gnutls26/guile-gnutls_2.11.7-2_i386.deb
libgnutls-dev_2.11.7-2_i386.deb
  to main/g/gnutls26/libgnutls-dev_2.11.7-2_i386.deb
(new) libgnutls-openssl27_2.11.7-2_i386.deb standard libs
the GNU TLS library - OpenSSL wrapper
 GnuTLS is a portable library which implements the Transport Layer
 Security (TLS 1.0, 1.1, 1.2) and Secure Sockets Layer (SSL) 3.0 protocols.
 .
 GnuTLS features support for:
  - TLS extensions: server name indication, max record size, opaque PRF
    input, etc.
  - authentication using the SRP protocol.
  - authentication using both X.509 certificates and OpenPGP keys.
  - TLS Pre-Shared-Keys (PSK) extension.
  - Inner Application (TLS/IA) extension.
  - X.509 and OpenPGP certificate handling.
  - X.509 Proxy Certificates (RFC 3820).
  - all the strong encryption algorithms (including SHA-256/384/512 and
    Camellia (RFC 4132)).
 .
 This package contains the runtime library of the GnuTLS OpenSSL wrapper.
libgnutls26-dbg_2.11.7-2_i386.deb
  to main/g/gnutls26/libgnutls26-dbg_2.11.7-2_i386.deb
libgnutls26_2.11.7-2_i386.deb
  to main/g/gnutls26/libgnutls26_2.11.7-2_i386.deb
libgnutlsxx27_2.11.7-2_i386.deb
  to main/g/gnutls26/libgnutlsxx27_2.11.7-2_i386.deb
Changes: gnutls26 (2.11.7-2) experimental; urgency=low
 .
  * 18_libgnutls-openssl_soname.diff. Bump libgnutls-openssl soname (libtool
    versioning: 27:0:0).
  * Split off libgnutls-openssl to a separate package, since the sonames are
    not in sync anymore.


Override entries for your package:
gnutls-bin_2.11.7-2_i386.deb - optional net
gnutls-doc_2.11.7-2_all.deb - optional doc
gnutls26_2.11.7-2.dsc - source devel
guile-gnutls_2.11.7-2_i386.deb - optional lisp
libgnutls-dev_2.11.7-2_i386.deb - optional libdevel
libgnutls26-dbg_2.11.7-2_i386.deb - extra debug
libgnutls26_2.11.7-2_i386.deb - standard libs
libgnutlsxx27_2.11.7-2_i386.deb - extra libs

Announcing to debian-devel-changes at lists.debian.org


Your package contains new components which requires manual editing of
the override file.  It is ok otherwise, so please be patient.  New
packages are usually added to the override file about once a week.

You may have gotten the distribution wrong.  You'll get warnings above
if files already exist in other distributions.


From news at garrafeiranacional.com  Fri Mar 11 23:02:19 2011
From: news at garrafeiranacional.com (Newsletter - Garrafeira Nacional)
Date: Fri, 11 Mar 2011 23:02:19 +0000
Subject: Garrafeira Nacional - Weekly specials
Message-ID: <292b49b26ea41cd47268e895f4218d8e@gncellar.com>

http://mailing.gncellar.com/pub/viewemail.php?id=1f99d68ce35e4d9a5f778265831825aa&c=212&m_id=137558&uid=c72906d69f
http://mailing.gncellar.com/pub/recomendar.php?uid=c72906d69f&hash=1f99d68ce35e4d9a5f778265831825aa&c=212&m_id=137558

http://mailing.gncellar.com/pub/rm.php?u=c72906d69f&l=737&c=212&e=1f99d68ce35e4d9a5f778265831825aa&m_id=137558



    | NEWSLETTER | WWW.GARRAFEIRANACIONAL.COM
   
   VERS??O PORTUGUESA  
   
   
     SPECIAL
   OFFERS
   
   
       19,00 EUR (including VAT)
   Quinta das Mur??as Reserva 2008 Red
                
   
   
         29,00 EUR (including VAT)
   Quinta de Pinha??os Altitude 2009 White
                  
   
   
      15,00 EUR (including VAT)
   Dona Maria Petit Verdot 2008 Red
               
   
   
        14,50 EUR (including VAT)
   Marquesa de Alorna Reserva 2009 White
                  
   
   
   14,90 EUR (including VAT)
   Hereditas Reserva 2007 Red
            
   
   
           23,00 EUR (including VAT)
   Quinta de Ventozelo Grande Reserva 2008 Red
                     
    

   
   
   Send to a:
   
   
   Share on my:
    
   

                 
            <a href="http://mailing.gncellar.com/pub/goto.php?l=1f99d68ce35e4d9a5f778265831825aa&u=c72906d69f&c_id=29811&l_id=737&cl_id=212&m_id=137558&url=aHR0cDovL21haWxpbmcuZ25jZWxsYXIuY29tL3B1Yi9mYWNlYm9va2xpa2UucGhwP2lkPTFmOTlkNjhjZTM1ZTRkOWE1Zjc3ODI2NTgzMTgyNWFhJmM9MjEyJm1faWQ9MTM3NTU4JnVpZD1jNzI5MDZkNjlm" border="0"><img src="http://mailing.gncellar.com/pub/goto.php?l=1f99d68ce35e4d9a5f778265831825aa&u=c72906d69f&c_id=29811&l_id=737&cl_id=212&m_id=137558&url=aHR0cDovL21haWxpbmcuZ25jZWxsYXIuY29tL3B1Yi9pbWFnZXMvZmJvb2tfbGlrZS1lbi5naWY=" border="0" alt="Facebook like"></a>
            
   WWW.GARRAFEIRANACIONAL.COM


http://mailing.gncellar.com/pub/viewemail.php?id=1f99d68ce35e4d9a5f778265831825aa&c=212&m_id=137558&uid=c72906d69f
http://mailing.gncellar.com/pub/recomendar.php?uid=c72906d69f&hash=1f99d68ce35e4d9a5f778265831825aa&c=212&m_id=137558

http://mailing.gncellar.com/pub/rm.php?u=c72906d69f&l=737&c=212&e=1f99d68ce35e4d9a5f778265831825aa&m_id=137558

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110311/bdaf69be/attachment-0001.htm>

From file---ofce2 at att.net  Sat Mar 12 04:36:32 2011
From: file---ofce2 at att.net (PROFF DAVE JONE)
Date: Fri, 11 Mar 2011 20:36:32 -0800 (PST)
Subject: RECEIVE YOUR ATM MASTER CARD FROM UPS COMPANY
Message-ID: <869391.91011.qm@web180201.mail.gq1.yahoo.com>



Hello My Dear,
?
This is to bring to your notice that your ATM package valued $2.5m usd has been deposited in UPS Service on?? 22/02/2011 So Contcat them immediately with your delivery address and phone number.

Here is their contact information below;
UPS OFFICE
NO.1222 IDUROCO ROAD,
COTONOU BENIN REPUBLIC
CONTACT PERSON:DR EMMA WILLIAM 
PHONE:+229 9862 8548
E-MAIL: (ups.2011 at msn.com)
Note that i paid the delivery fee and the only fee you will pay is $25 per day for their office keeping fee.

Thanks
PROFF DAVE JONE 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110311/b4869f68/attachment.htm>

From ezanthony_j1 at att.net  Sat Mar 12 14:48:29 2011
From: ezanthony_j1 at att.net (Anthony E. John)
Date: Sat, 12 Mar 2011 06:48:29 -0800
Subject: Message From Hon. Anthony Please Read & Get back to me
Message-ID: <mailman.398.1299945240.8014.pkg-gnutls-maint@lists.alioth.debian.org>

FROM THE NEW ELECTED MINISTER
FEDERAL MINISTRY OF FINANCE,
5th Floor, Annex 3, New Federal Secretariat Complex,
Shangri Way, Central Area Abuja
NG BRANCH OFFICE

Greetings,
My name is Anthony Ezan John, I am the personal Secretary to the new Minister of Finance, I am directed to contact you through email by the Minister since we have tried severally without good result to reach you through the phone number in your file. We want to urgently confirm from you if actually you authorized the change of your account and beneficiary. We have Dr. James Baker and Prof. Charles C. Soludo. The Former Governor of a Bank and his Colleagues who claim to be your business associate/partner in America are claiming that you are dead and that they will like to change all your Information to us as beneficiary. Below is the new banking information where they wish to have this funds transferred to Bank of America

6901 Northwest Expressway
Oklahoma City, Oklahoma 73132
ABA Routing: 026009593
ACCT No: 003042656833
ACCT Name: FMS Investments Inc.

The finance minister has approved the sum of four million five hundred thousand dollars in your favor as part payment of your total amount. Your swift response to this mail will help a lot; do email me with your Full Names, your authorized Account Information, Direct Phone Number for easy communication and Scan Copy of your identity. If you are alive reach me through the above phone number so that I will direct you the next level to receive your funds or we go ahead with the changes which will take effect after three working days.
Best Regards,
DR. MANSUR MUHTAR FEDERAL MINISTRY OF FINANCE (FMF)
PERSONAL SECRETARY: MR. Anthony Ezan John.
Email:ant_22 at rocketmail.com

CONFIDENTIALITY NOTICE: This E-Mail is intended only for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential and exempt from disclosure under applicable law. If you have received this Communication in error, please do not distribute and delete the original message. Please notify the sender by E-Mail at the address shown. Thank you for your compliance.


From Comparer_des_devis at e-marketing-canal.com  Mon Mar 14 06:01:33 2011
From: Comparer_des_devis at e-marketing-canal.com (Comparer des devis)
Date: Mon, 14 Mar 2011 07:01:33 +0100
Subject: =?utf-8?Q?G=C3=A9rez_vos_=C3=A9quipes_mobiles_=C3=A0_distance!?=
Message-ID: <80a178269768ab2bbe2eb6772c97c7ee@e-marketing-canal.com>

Pour visualiser et se d?sabonner ce message,
 
Veuillez, copier puis coller, l'adresse URL compl?te ci-dessous dans la
barre d'adresse de votre navigateur et appuyer sur la touche "Entr?e" de
votre clavier.



- - - - - - - - - - - - - - - - - 

http://app.e-marketing-canal.com/v/?camp=563890632641299078591927842701_5&ms=cGtnLWdudXRscy1tYWludEBsaXN0cy5hbGlvdGguZGViaWFuLm9yZw==

- - - - - - - - - - - - - - - - - 



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110314/f76d07f8/attachment.htm>

From ftpmaster at ftp-master.debian.org  Mon Mar 14 15:32:27 2011
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Mon, 14 Mar 2011 15:32:27 +0000
Subject: gnutls26_2.11.7-2_i386.changes ACCEPTED into experimental
Message-ID: <E1Pz9kx-0000op-Dp@franck.debian.org>




Accepted:
gnutls-bin_2.11.7-2_i386.deb
  to main/g/gnutls26/gnutls-bin_2.11.7-2_i386.deb
gnutls-doc_2.11.7-2_all.deb
  to main/g/gnutls26/gnutls-doc_2.11.7-2_all.deb
gnutls26_2.11.7-2.debian.tar.gz
  to main/g/gnutls26/gnutls26_2.11.7-2.debian.tar.gz
gnutls26_2.11.7-2.dsc
  to main/g/gnutls26/gnutls26_2.11.7-2.dsc
guile-gnutls_2.11.7-2_i386.deb
  to main/g/gnutls26/guile-gnutls_2.11.7-2_i386.deb
libgnutls-dev_2.11.7-2_i386.deb
  to main/g/gnutls26/libgnutls-dev_2.11.7-2_i386.deb
libgnutls-openssl27_2.11.7-2_i386.deb
  to main/g/gnutls26/libgnutls-openssl27_2.11.7-2_i386.deb
libgnutls26-dbg_2.11.7-2_i386.deb
  to main/g/gnutls26/libgnutls26-dbg_2.11.7-2_i386.deb
libgnutls26_2.11.7-2_i386.deb
  to main/g/gnutls26/libgnutls26_2.11.7-2_i386.deb
libgnutlsxx27_2.11.7-2_i386.deb
  to main/g/gnutls26/libgnutlsxx27_2.11.7-2_i386.deb


Override entries for your package:
gnutls-bin_2.11.7-2_i386.deb - optional net
gnutls-doc_2.11.7-2_all.deb - optional doc
gnutls26_2.11.7-2.dsc - source devel
guile-gnutls_2.11.7-2_i386.deb - optional lisp
libgnutls-dev_2.11.7-2_i386.deb - optional libdevel
libgnutls-openssl27_2.11.7-2_i386.deb - standard libs
libgnutls26-dbg_2.11.7-2_i386.deb - extra debug
libgnutls26_2.11.7-2_i386.deb - standard libs
libgnutlsxx27_2.11.7-2_i386.deb - extra libs

Announcing to debian-devel-changes at lists.debian.org


Thank you for your contribution to Debian.


From noreply at release.debian.org  Wed Mar 16 16:39:16 2011
From: noreply at release.debian.org (Debian testing watch)
Date: Wed, 16 Mar 2011 16:39:16 +0000
Subject: libksba 1.2.0-1 MIGRATED to testing
Message-ID: <E1Pztki-0003vr-01@franck.debian.org>

FYI: The status of the libksba source package
in Debian's testing distribution has changed.

  Previous version: 1.1.0-2
  Current version:  1.2.0-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See http://release.debian.org/testing-watch/ for more information.


From hanizabahmadd at att.net  Wed Mar 16 18:30:30 2011
From: hanizabahmadd at att.net (Hanizab Ahmadd)
Date: Thu, 17 Mar 2011 02:30:30 +0800
Subject: GET IN TOUCH
Message-ID: <OWNERPCed80e03046b9456ea3bd05e6d8c27d68@OwnerPC>

Dear Friend,



I am Haniza Ahmad an attorney at law.A deceased client of mine died as result of a heart-related 
condition on March 12th 2009 leaving behind a deposit valued of $19 million dollars,his heart 
condition was due to the death of all the members of his family in the tsunami disaster on 
the 26th December 2004 in Sumatra Indonesia. http://en.wikipedia.org/wiki/2004_Indian_Ocean_earthquake.

I want you to assist me in distributing the money left behind by my client before it is confiscated
or declared unserviceable by the bank.

The bank has issued me a notice to contact the next of kin. My proposition to you is to seek your
consent to present you as the next-of-kin and beneficiary of my named client.

This will be executed under a legitimate arrangement that will protect you from any breach of the 
law.



Best Regards
Haniza Ahmad
Attorney at Law.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110317/ca115b83/attachment.htm>

From lloydjayaustin at aol.com  Wed Mar 16 19:01:53 2011
From: lloydjayaustin at aol.com (Lt. Gen. Lloyd J. Austin)
Date: Wed, 16 Mar 2011 20:01:53 +0100
Subject: IMMEDIATE ACTION NEEDED. 
Message-ID: <20110316185711.35849344444C@mail.asteria.biz>

I am Lt. Gen. Lloyd J. Austin, a United States Army General who currently serves as Commanding General, 
United States Forces in Iraq. I am on the move to Afghanistan from Iraq as the last batch just left 
and have some items I will need to ship to you. Can you help?


From miss_karolina at hotmail.com  Thu Mar 17 07:26:54 2011
From: miss_karolina at hotmail.com (Tambo)
Date: Thu, 17 Mar 2011 00:26:54 -0700 (PDT)
Subject: Hello how are you doing
Message-ID: <519411.44802.qm@web180610.mail.sp1.yahoo.com>



Hello how are you doing?



My name is Ms Karolina. i will be very happy to know you and have you as a good friend



i will be waiting to hear from you and to to tell you more about me and my picture



your new friend



Ms Karolina.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110317/604ef703/attachment.htm>

From news at gncellar.com  Fri Mar 18 19:43:15 2011
From: news at gncellar.com (Newsletter - Garrafeira Nacional)
Date: Fri, 18 Mar 2011 19:43:15 +0000
Subject: Happy Father's Day
Message-ID: <7900a97124f30ef69b603eab1ca0cbd8@gncellar.com>

http://mailing.gncellar.com/pub/viewemail.php?id=269bf8f47194f060b12ea8ec676e35e1&c=212&m_id=140309&uid=c72906d69f



   [1]WWW.GNCELLAR.COM [2] 
   [3]??? My father taught me to enjoy the better things in life.???
   [4]Happy Father???s Day! 
   [5]Some of them are available at GN Cellar!
              [6]Happy Father???s Day
               [7]www.gncellar.com

   [8]Garrafeira Nacional - Fundada em 1927 
   [9]Recommend to a
   [10]Recomendar a um amigo! 
   
   [11]Share
   [12]Difundir nas redes sociais 
   

   
    <a href="http://mailing.gncellar.com/pub/goto.php?l=269bf8f47194f060b12ea8ec676e35e1&u=c72906d69f&c_id=29816&l_id=737&cl_id=212&m_id=140309&url=aHR0cDovL21haWxpbmcuZ25jZWxsYXIuY29tL3B1Yi9mYWNlYm9va2xpa2UucGhwP2lkPTI2OWJmOGY0NzE5NGYwNjBiMTJlYThlYzY3NmUzNWUxJmM9MjEyJm1faWQ9MTQwMzA5JnVpZD1jNzI5MDZkNjlm" border="0"><img src="http://mailing.gncellar.com/pub/goto.php?l=269bf8f47194f060b12ea8ec676e35e1&u=c72906d69f&c_id=29816&l_id=737&cl_id=212&m_id=140309&url=aHR0cDovL21haWxpbmcuZ25jZWxsYXIuY29tL3B1Yi9pbWFnZXMvZmJvb2tfbGlrZS1lbi5naWY=" border="0" alt="Facebook like"></a> 
   
   [13]WWW.GNCELLAR.COM 

References

   1. http://mailing.gncellar.com/pub/goto.php?l=269bf8f47194f060b12ea8ec676e35e1&u=c72906d69f&c_id=29816&l_id=737&cl_id=212&m_id=140309&url=aHR0cDovL3d3dy5nbmNlbGxhci5jb20v
   2. http://mailing.gncellar.com/pub/goto.php?l=269bf8f47194f060b12ea8ec676e35e1&u=c72906d69f&c_id=29816&l_id=737&cl_id=212&m_id=140309&url=aHR0cDovL3d3dy5nYXJyYWZlaXJhbmFjaW9uYWwuY29tLw==
   3. http://mailing.gncellar.com/pub/goto.php?l=269bf8f47194f060b12ea8ec676e35e1&u=c72906d69f&c_id=29816&l_id=737&cl_id=212&m_id=140309&url=aHR0cDovL3d3dy5nbmNlbGxhci5jb20v
   4. http://mailing.gncellar.com/pub/goto.php?l=269bf8f47194f060b12ea8ec676e35e1&u=c72906d69f&c_id=29816&l_id=737&cl_id=212&m_id=140309&url=aHR0cDovL3d3dy5nbmNlbGxhci5jb20v
   5. http://mailing.gncellar.com/pub/goto.php?l=269bf8f47194f060b12ea8ec676e35e1&u=c72906d69f&c_id=29816&l_id=737&cl_id=212&m_id=140309&url=aHR0cDovL3d3dy5nbmNlbGxhci5jb20v
   6. http://mailing.gncellar.com/pub/goto.php?l=269bf8f47194f060b12ea8ec676e35e1&u=c72906d69f&c_id=29816&l_id=737&cl_id=212&m_id=140309&url=aHR0cDovL3d3dy5nbmNlbGxhci5jb20v
   7. http://mailing.gncellar.com/pub/goto.php?l=269bf8f47194f060b12ea8ec676e35e1&u=c72906d69f&c_id=29816&l_id=737&cl_id=212&m_id=140309&url=aHR0cDovL3d3dy5nbmNlbGxhci5jb20v
   8. http://mailing.gncellar.com/pub/goto.php?l=269bf8f47194f060b12ea8ec676e35e1&u=c72906d69f&c_id=29816&l_id=737&cl_id=212&m_id=140309&url=aHR0cDovL3d3dy5nbmNlbGxhci5jb20v
   9. http://mailing.gncellar.com/pub/goto.php?l=269bf8f47194f060b12ea8ec676e35e1&u=c72906d69f&c_id=29816&l_id=737&cl_id=212&m_id=140309&url=aHR0cDovL21haWxpbmcuZ25jZWxsYXIuY29tL3B1Yi9yZWNvbWVuZGFyLnBocD91aWQ9YzcyOTA2ZDY5ZiZoYXNoPTI2OWJmOGY0NzE5NGYwNjBiMTJlYThlYzY3NmUzNWUxJmM9MjEyJm1faWQ9MTQwMzA5
  10. http://mailing.gncellar.com/pub/goto.php?l=269bf8f47194f060b12ea8ec676e35e1&u=c72906d69f&c_id=29816&l_id=737&cl_id=212&m_id=140309&url=aHR0cDovL21haWxpbmcuZ25jZWxsYXIuY29tL3B1Yi9yZWNvbWVuZGFyLnBocD91aWQ9YzcyOTA2ZDY5ZiZoYXNoPTI2OWJmOGY0NzE5NGYwNjBiMTJlYThlYzY3NmUzNWUxJmM9MjEyJm1faWQ9MTQwMzA5
  11. http://mailing.gncellar.com/pub/goto.php?l=269bf8f47194f060b12ea8ec676e35e1&u=c72906d69f&c_id=29816&l_id=737&cl_id=212&m_id=140309&url=aHR0cDovL21haWxpbmcuZ25jZWxsYXIuY29tL3B1Yi9zb2NpYWwucGhwP2hhc2g9MjY5YmY4ZjQ3MTk0ZjA2MGIxMmVhOGVjNjc2ZTM1ZTEmdWlkPWM3MjkwNmQ2OWYmYz0yMTImbV9pZD0xNDAzMDk=
  12. http://mailing.gncellar.com/pub/goto.php?l=269bf8f47194f060b12ea8ec676e35e1&u=c72906d69f&c_id=29816&l_id=737&cl_id=212&m_id=140309&url=aHR0cDovL21haWxpbmcuZ25jZWxsYXIuY29tL3B1Yi9zb2NpYWwucGhwP2hhc2g9MjY5YmY4ZjQ3MTk0ZjA2MGIxMmVhOGVjNjc2ZTM1ZTEmdWlkPWM3MjkwNmQ2OWYmYz0yMTImbV9pZD0xNDAzMDk=
  13. http://mailing.gncellar.com/pub/goto.php?l=269bf8f47194f060b12ea8ec676e35e1&u=c72906d69f&c_id=29816&l_id=737&cl_id=212&m_id=140309&url=aHR0cDovL3d3dy5nbmNlbGxhci5jb20v


http://mailing.gncellar.com/pub/viewemail.php?id=269bf8f47194f060b12ea8ec676e35e1&c=212&m_id=140309&uid=c72906d69f
http://mailing.gncellar.com/pub/recomendar.php?uid=c72906d69f&hash=269bf8f47194f060b12ea8ec676e35e1&c=212&m_id=140309

http://mailing.gncellar.com/pub/lista_pub_altera.php?listaID=NzM3XzIxMg==&c=212&m_id=140309&uid=c72906d69f

http://mailing.gncellar.com/pub/rm.php?u=c72906d69f&l=737&c=212&e=269bf8f47194f060b12ea8ec676e35e1&m_id=140309
http://mailing.gncellar.com/pub/social.php?hash=269bf8f47194f060b12ea8ec676e35e1&uid=c72906d69f&c=212&m_id=140309&social=facebook
http://mailing.gncellar.com/pub/social.php?hash=269bf8f47194f060b12ea8ec676e35e1&uid=c72906d69f&c=212&m_id=140309&social=twitter
http://mailing.gncellar.com/pub/social.php?hash=269bf8f47194f060b12ea8ec676e35e1&uid=c72906d69f&c=212&m_id=140309&social=googlebuzz
http://mailing.gncellar.com/pub/facebooklike.php?id=269bf8f47194f060b12ea8ec676e35e1&c=212&m_id=140309&uid=c72906d69f

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110318/25b4eb1c/attachment.htm>

From news at garrafeiranacional.com  Fri Mar 18 23:02:16 2011
From: news at garrafeiranacional.com (Newsletter - Garrafeira Nacional)
Date: Fri, 18 Mar 2011 23:02:16 +0000
Subject: Garrafeira Nacional - Weekly specials
Message-ID: <fd8cb387a600697b0d1dfddfbebadea0@gncellar.com>

http://mailing.gncellar.com/pub/viewemail.php?id=3cd2509c2dbad21009c4b5ef72c912dd&c=212&m_id=140356&uid=c72906d69f
http://mailing.gncellar.com/pub/recomendar.php?uid=c72906d69f&hash=3cd2509c2dbad21009c4b5ef72c912dd&c=212&m_id=140356

http://mailing.gncellar.com/pub/rm.php?u=c72906d69f&l=737&c=212&e=3cd2509c2dbad21009c4b5ef72c912dd&m_id=140356



    | NEWSLETTER | WWW.GARRAFEIRANACIONAL.COM
   
   VERS??O PORTUGUESA  
   
   
     SPECIAL
   OFFERS
   
   
               15,70 EUR (including VAT)
   Quinta da Lagoalva Late Harvest 2009 White 0.375cl
                        
   
   
    34,35 EUR (including VAT)
   Rum Plantation Barbados 2000
             
   
   
               19,50 EUR (including VAT)
   Vodka Smirnoff Red Speaker Pack Limited Edition 1
                        
   
   
   136,00 EUR (including VAT)
   Glen Grant 170th Anniversary
             
   
   
   140,00 EUR (including VAT)
       Buchanan's Red Seal
             
   
   
     52,00 EUR (including VAT)
   Seagram's 7 Dark Honey 1 Liter
              
    

   
   
   Send to a:
   
   
   Share on my:
    
   

                 
            <a href="http://mailing.gncellar.com/pub/goto.php?l=3cd2509c2dbad21009c4b5ef72c912dd&u=c72906d69f&c_id=29818&l_id=737&cl_id=212&m_id=140356&url=aHR0cDovL21haWxpbmcuZ25jZWxsYXIuY29tL3B1Yi9mYWNlYm9va2xpa2UucGhwP2lkPTNjZDI1MDljMmRiYWQyMTAwOWM0YjVlZjcyYzkxMmRkJmM9MjEyJm1faWQ9MTQwMzU2JnVpZD1jNzI5MDZkNjlm" border="0"><img src="http://mailing.gncellar.com/pub/goto.php?l=3cd2509c2dbad21009c4b5ef72c912dd&u=c72906d69f&c_id=29818&l_id=737&cl_id=212&m_id=140356&url=aHR0cDovL21haWxpbmcuZ25jZWxsYXIuY29tL3B1Yi9pbWFnZXMvZmJvb2tfbGlrZS1lbi5naWY=" border="0" alt="Facebook like"></a>
            
   WWW.GARRAFEIRANACIONAL.COM


http://mailing.gncellar.com/pub/viewemail.php?id=3cd2509c2dbad21009c4b5ef72c912dd&c=212&m_id=140356&uid=c72906d69f
http://mailing.gncellar.com/pub/recomendar.php?uid=c72906d69f&hash=3cd2509c2dbad21009c4b5ef72c912dd&c=212&m_id=140356

http://mailing.gncellar.com/pub/rm.php?u=c72906d69f&l=737&c=212&e=3cd2509c2dbad21009c4b5ef72c912dd&m_id=140356

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110318/f591013a/attachment-0001.htm>

From comercial at konasexshop.com.br  Fri Mar 18 17:11:40 2011
From: comercial at konasexshop.com.br (Kona)
Date: Fri, 18 Mar 2011 13:11:40 -0400
Subject: De Pernas Pro Ar!!!!
Message-ID: <4699e22a0a31e47c9659c253d71f6ace@mkt.konasexshop.com.br>

An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110318/352e2353/attachment.htm>

From owner at bugs.debian.org  Sat Mar 19 15:12:06 2011
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Sat, 19 Mar 2011 15:12:06 +0000
Subject: Bug#616035: marked as done ([libgnutls26] Breaks OpenLDAP with
	message: TLS: peer cert untrusted or revoked (0x402))
References: <20110319150917.GA1977@downhill.g.la> <4D6D9AB1.8030008@gmail.com>
Message-ID: <handler.616035.D616035.130054739029356.ackdone@bugs.debian.org>

Your message dated Sat, 19 Mar 2011 16:09:17 +0100
with message-id <20110319150917.GA1977 at downhill.g.la>
and subject line Re: Bug#616035: [libgnutls26] Breaks OpenLDAP with message: TLS: peer cert untrusted or revoked (0x402)
has caused the Debian Bug report #616035,
regarding [libgnutls26] Breaks OpenLDAP with message: TLS: peer cert untrusted or revoked (0x402)
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
616035: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=616035
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: =?UTF-8?B?VmVkcmFuIEZ1cmHEjQ==?= <vedran.furac at gmail.com>
Subject: [libgnutls26] Breaks OpenLDAP with message: TLS: peer cert untrusted
 or revoked (0x402)
Date: Wed, 02 Mar 2011 02:17:37 +0100
Size: 4445
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110319/e891af01/attachment.eml>
-------------- next part --------------
An embedded message was scrubbed...
From: Andreas Metzler <ametzler at downhill.at.eu.org>
Subject: Re: Bug#616035: [libgnutls26] Breaks OpenLDAP with message: TLS:
 peer cert untrusted or revoked (0x402)
Date: Sat, 19 Mar 2011 16:09:17 +0100
Size: 3507
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110319/e891af01/attachment-0001.eml>

From linda.ruth11 at web.de  Sat Mar 19 16:56:48 2011
From: linda.ruth11 at web.de (linda.ruth11 at web.de)
Date: Sat, 19 Mar 2011 17:56:48 +0100
Subject: SCHNEL
Message-ID: <121225433592557@PC06>

Lieber Freund,
Mein Name ist Linda Ruth Ich habe einen Tumor im Hirn und sterbe.
Ich habe beschlossen die gesamten Ersparnisse meines Mannes die er mir hinterlassen hat,
durch einen Dritten einem wohlt?tige Zwecke zu spenden .
Ich bin jetzt 59 Jahre alt und vor ca. 2 Jahren,
kurz nach dem Tod meines Mannes, wurde bei mir Krebs diagnostiziert.
Vor 20 Jahren bin ich mit meinem Mann hierher nach Libya gezogen.
Doch in all der Zeit hat sich niemand gefunden der mein Vertrauen verdient hat.
Und jetzt wo ich krank bin sehe ich in den Augen der angeblichen Freunde,
wie sie nur darauf warten das ich Sterbe,
damit sie die 13 Millionen Euro die mein Mann mir hinterlassen hat untereinander aufteilen k?nnen.
Aber das werde ich nicht zulassen.
Und wenn es das letzte ist was ich tun.
Und wenn ich sterbe ist der einzige Erbe des ganzen Gelds mein Stiefsohn,
der sein Leben lang mit seinem Vater, meinem Mann Zerstritten war.
Er hat uns all die Jahre terrorisiert.
Und au?erdem ist er kein guter Mensch.
Jemand der einen Puff betreibt kann kein guter Mensch sein.
Sie wundern sich vielleicht, warum ich Sie gew?hlt habe.
Doch jemand muss es f?r mich tun,
denn ich kann es beim besten Willen nicht mehr selbst veranlassen.
Es ist mein Wunsch das 70% des Geldes an die Krebsforschung Gestiftet wird sobald es erfolgreich bei dir angekommen ist,
und somit ohne das wissen meines Stiefsohns aus seine Reichweite gelangt ist.
Die restlichen 30% kannst du f?r deine M?he behalten.
Ich wurde vom Herrn ber?hrt und seine Liebe ?ffnete mein Herz und meine Augen.
Ich habe den Herrn gebeten, mir f?r meine S?nden zu vergeben,
und ich glaube er hat es getan,weil er barmherzig ist.
Ich habe in zwei Wochen eine OP und der Doktor hat mir eine 50/50 Chance versichert,
dass ich sie ?berleben werde.
Das ist mein letzter Versuch das von meinem Mann hart erarbeitete Geld vor den Missbrauch durch sein Sohn zu bewahren.
Davon abgesehen braucht er es nicht.
Im Moment kann ich keine Telefonate f?hren, aufgrund der Tatsache, dass meine Bekannten aus vorgespielter Sorge
die ganze Zeit um mich herum kriechen,
und weil der Arzt mir nicht erlaubt ein Handy zu benutzen.
Das ich es Zustande gekriegt habe, diese Nachricht zu schreiben hab ich nur meiner netten Krankenschwester zu verdanken
die mir ein Internetcaf? hier in der N?he gezeigt hat.
Gestern ist unser Familienanwalt vorbeigekommen.
Zu Gl?ck war kein anderer da so konnte ich ihn in aller Ruhe in mein Vorhaben einweihen.
Er hat mir versichere das er alles f?r die Transaktion und die ?nderung meines letzten Willen vorbereiten wird.
Eigentlich muss ich es ja nicht Geheim halten aber ich will das pers?nlichen Gr?nden das es niemand vor meinem Tod erf?hrt.
Denn wenn dies geschieht, wird der dadurch verursachte Stress mir die letzte Lebensenergie rauben.
Wenn sie der ?berzeugung sind das sie der Herausforderung gewachsen sind dann antworten sie bitte so schnell wie nur M?glich.
Doch ich wei? nicht wie viel Zeit mir noch bleibt.
In allen F?llen w?nsche ich, dass die Liebe des Herren in deinem Leben walten m?ge,
und dich auf den Weg der Erkenntnis leiten m?ge.
Gott sei mit dir
Liebe Gr??en
Linda Ruth 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110319/79036587/attachment.htm>

From paypal at accounts.com  Sun Mar 20 11:44:45 2011
From: paypal at accounts.com (PayPal)
Date: Sun, 20 Mar 2011 17:14:45 +0530
Subject: :SPAM: Dear valued PayPal Customer,
Message-ID: <mailman.417.1300621927.8014.pkg-gnutls-maint@lists.alioth.debian.org>


Due to a policy update we need to verify your PayPal account.
Please download the attached file , open it using your browser ,fill in the required information and click update .
Should you decide you do not wish to accept the verification process you can notify us before 27/03/2011 to close your account immediately without incurring any additional charges.
 
We do hope, however, that you continue to use PayPal and enjoy the following benefits:
It's safer
When you pay with PayPal your financial details are never shared with sellers or retailers, so you?e more protected against fraud.
It's faster
You don? have to type in your card details each time you pay, so you can check out faster online. You can also get eBay items delivered more quickly, as you can pay the seller instantly.
It?'s easier
PayPal is the preferred web payment method in the world because it? a smarter, savvier way to pay online in just a few clicks. All you need is your email address and a password.
 
Copyright ? 1999-2011 PayPal. All rights reserved.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Verify.htm
Type: application/octet-stream
Size: 23998 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110320/1f6f1446/attachment.obj>

From christoph at debian.org  Mon Mar 21 12:56:02 2011
From: christoph at debian.org (Christoph Egger)
Date: Mon, 21 Mar 2011 13:56:02 +0100
Subject: Bug#619119: gnutls-bin: can't connect to IPv6 TLS host
Message-ID: <20110321125602.6052.36569.reportbug@chillida.siccegge.de>

Package: gnutls-bin
Version: 2.10.5-1
Severity: serious

/---
% gnutls-cli -p 993 imap.freenet.de                  
Resolving 'imap.freenet.de'...
Connecting to '2001:748:100:40::8:110:993'...
Cannot connect to imap.freenet.de:993: Operation not permitted
\---

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: kfreebsd-amd64 (x86_64)

Kernel: kFreeBSD 8.2-1-amd64
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages gnutls-bin depends on:
ii  libc0.1                 2.11.2-13        Embedded GNU C Library: Shared lib
ii  libgcrypt11             1.4.6-5          LGPL Crypto library - runtime libr
ii  libgnutls26             2.10.5-1         the GNU TLS library - runtime libr
ii  libreadline6            6.1-3            GNU readline and history libraries
ii  libtasn1-3              2.9-2            Manage ASN.1 structures (runtime)
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

gnutls-bin recommends no packages.

gnutls-bin suggests no packages.

-- no debconf information




From christoph at debian.org  Mon Mar 21 13:11:29 2011
From: christoph at debian.org (Christoph Egger)
Date: Mon, 21 Mar 2011 14:11:29 +0100
Subject: Bug#619119: hm wait
Message-ID: <878vw88vpa.fsf@oteiza.siccegge.de>

Hi!

    These IPv6 / kfreebsd thing actually looks like not being gnutls
specific at all. I'll do some more digging as soon as I find time.

Regards

    Christoph




From kenmcy00453 at att.net  Mon Mar 21 17:37:59 2011
From: kenmcy00453 at att.net (Mckay Ken)
Date: Mon, 21 Mar 2011 17:37:59 -0000
Subject: From;Mr.Ken Mckay
Message-ID: <297011.13216.qm@smtp106.sbc.mail.bf1.yahoo.com>

Hello!

My name is Mr. ken mckay I will like to invest in your country but I don't know anybody that will help me when I come over there that is my reason of contacting you to know if you will be of assistance.


I have $18M dollars to invest in a profitable business in your country.If you can handle it then let me know so that we shall plan how to meet ourselves to workout modalites.


Waiting to hear from you for further information.

Best regards,

Mr. ken mckay.


From owner at bugs.debian.org  Mon Mar 21 17:57:11 2011
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Mon, 21 Mar 2011 17:57:11 +0000
Subject: Bug#619119: marked as done (gnutls-bin: can't connect to IPv6 TLS
	host)
References: <87ipvctl0y.fsf_-_@hepworth.siccegge.de>
	<20110321125602.6052.36569.reportbug@chillida.siccegge.de>
Message-ID: <handler.619119.D619119.130073019820814.ackdone@bugs.debian.org>

Your message dated Mon, 21 Mar 2011 18:56:29 +0100
with message-id <87ipvctl0y.fsf_-_ at hepworth.siccegge.de>
and subject line user error
has caused the Debian Bug report #619119,
regarding gnutls-bin: can't connect to IPv6 TLS host
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
619119: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=619119
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Christoph Egger <christoph at debian.org>
Subject: gnutls-bin: can't connect to IPv6 TLS host
Date: Mon, 21 Mar 2011 13:56:02 +0100
Size: 3082
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110321/f99dfcc4/attachment.eml>
-------------- next part --------------
An embedded message was scrubbed...
From: Christoph Egger <christoph at debian.org>
Subject: user error
Date: Mon, 21 Mar 2011 18:56:29 +0100
Size: 3149
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110321/f99dfcc4/attachment-0001.eml>

From webmaster at windowonlinewowonline.co.uk  Tue Mar 22 12:41:13 2011
From: webmaster at windowonlinewowonline.co.uk (ANTONIO CAMATTI WILSON)
Date: Tue, 22 Mar 2011 05:41:13 -0700
Subject: Gefeliciteerd je hebt gewonnen/Gelieve Bijlage bekijken Voor meer
	details
Message-ID: <1Q25Zy-0006V8-EI@7.mx.freenet.de>

A non-text attachment was scrubbed...
Name: Lottery.txt
Type: application/octet-stream
Size: 6443 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110322/d83a4ce8/attachment.obj>

From rev.mikewalker at ymail.com  Tue Mar 22 20:34:27 2011
From: rev.mikewalker at ymail.com (Rev.Dr.Mike Walker)
Date: Tue, 22 Mar 2011 12:34:27 -0800
Subject: call me today
Message-ID: <THORkjGXWmp0CaQv2u60001526a@mail.connection-net.com.br>

I want to assure you that there is light at the end of the tunnel after all the disappointment and frustrations that you have gone through in the hands of the fraudsters and impostors.The good news is that you can still receive your beneficiary payment if you do the right thing.Please do not allow anybody to deceive and defraud you again.I am the only person with the constitutional power and authority to transfer your beneficiary payment.Without my signature no beneficiary will ever receive one cent from CBN.All the powers to transfer any beneficiary payment belongs to me and to no one else.There is only one genuine Director of Finance and that is me and no other person. 
 
The only way I can prove myself is to transfer your funds into your account within 24hours that you have fulfilled CBN/ministry of Finance transfer condition.You have suffered enough in the hands of the fraudsters.It is now time for you to see the light and receive your beneficiary payment.Stop listening to all the stupid,baseless and senseless stories from the fraudsters as to the reasons why your beneficiary payment is being delayed.
They are not telling you the truth.
 
The plain truth is that they do not have the power to effect your beneficiary payment.I am responsible for withholding your beneficiary payment file,so if you like pay,pay, pay to the fraudsters until you are tired and frustrated of paying, you will still not receive one dollar until you adhere strictly to this genuine CBN/ministry of Finance transfer conditions.Contact me immediately you receive this letter through email if you are serious about receiving your legacy payment.I will effect your transfer within 24hours that you have contacted me.To this end you are advice to stop any form of communication with any one regarding your payment except through me and you are expected to attach to this email your proof of identity either a copy of your international passport or driver's licence for identification, your mobile telephone number for proper/prompt and speedy communication which is the bedrock of this transaction,
 
Regards
Rev.Dr.Mike Walker


From reema at lkcgroupemail.com  Wed Mar 23 17:16:18 2011
From: reema at lkcgroupemail.com (reema)
Date: Wed, 23 Mar 2011 12:16:18 -0500
Subject: 7Habits Of Highly Effective People :Signature Program
Message-ID: <d05e0779c8f12bf7a0d13b7b715d731a@www.lkcgroupemail.com>





To Unsubscribe visit
http://lkcgroupemail.com/portal/lt.php?id=Y0RQU1JTUl4CC08PUlFMVAMAVl0FWw%3D%3D
Great Regards
Reema
+91 9811422896

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110323/ce209861/attachment.htm>

From anitayousf88 at rediffmail.com  Thu Mar 24 05:58:49 2011
From: anitayousf88 at rediffmail.com (anita yousf)
Date: 24 Mar 2011 05:58:49 -0000
Subject: =?utf-8?B?R3JlZXRpbmdz?=
Message-ID: <20110324055849.13007.qmail@f4mail-234-239.rediffmail.com>



My name is Ms Anita Yousuf from London, I have an Important discussion I will like to have with you. Its private and
&nbsp;&nbsp;&nbsp; Urgent please kindly Contact me on my email at

&nbsp;&nbsp;&nbsp; anitayousf4 at gmail.com

 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110324/a52a4726/attachment.htm>

From augustinedinga77 at hotmail.co.za  Thu Mar 24 05:23:04 2011
From: augustinedinga77 at hotmail.co.za (Barrister Augustine Dinga)
Date: Wed, 23 Mar 2011 22:23:04 -0700 (PDT)
Subject: Immediate transfer of $23.5 Million Dollars to you
Message-ID: <508431.78850.qm@web180509.mail.gq1.yahoo.com>



PLEASE VIEW THE ATTACHED FILE FOR DETAILS.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110323/1ae45169/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: DETAILS OF THE TRANSACTION.doc
Type: application/msword
Size: 26112 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110323/1ae45169/attachment-0001.doc>

From news at garrafeiranacional.com  Fri Mar 25 23:02:18 2011
From: news at garrafeiranacional.com (Newsletter - Garrafeira Nacional)
Date: Fri, 25 Mar 2011 23:02:18 +0000
Subject: Garrafeira Nacional - Weekly specials
Message-ID: <e6182a44cd4b395f421a2be60cef7b71@gncellar.com>

http://mailing.gncellar.com/pub/viewemail.php?id=6007acb91628aa6b982b3a2d1208dcc2&c=212&m_id=143302&uid=c72906d69f
http://mailing.gncellar.com/pub/recomendar.php?uid=c72906d69f&hash=6007acb91628aa6b982b3a2d1208dcc2&c=212&m_id=143302

http://mailing.gncellar.com/pub/rm.php?u=c72906d69f&l=737&c=212&e=6007acb91628aa6b982b3a2d1208dcc2&m_id=143302



    | NEWSLETTER | WWW.GARRAFEIRANACIONAL.COM
   
   VERS??O PORTUGUESA  
   
   
     SPECIAL
   OFFERS
   
   
     56,90 EUR (including VAT)
   Maker's Mark Mint Julep 1 Liter
               
   
   
   35,50 EUR (including VAT)
   The Botanist Islay Dry Gin
            
   
   
              27,50 EUR (including VAT)
   Firewater Quinta das B??geiras V??nica Velha 0.50cl
                        
   
   
        21,90 EUR (including VAT)
   Petit Verdot Herdade Espor??o 2008 Red
                  
   
   
     22,50 EUR (including VAT)
   Principal T??te Cuv??e 2009 Rose
               
   
   
       22,50 EUR (including VAT)
   Royal Palmeira Loureiro 2009 White
                
    

   
   
   Send to a:
   
   
   Share on my:
    
   

                 
            <a href="http://mailing.gncellar.com/pub/goto.php?l=6007acb91628aa6b982b3a2d1208dcc2&u=c72906d69f&c_id=29822&l_id=737&cl_id=212&m_id=143302&url=aHR0cDovL21haWxpbmcuZ25jZWxsYXIuY29tL3B1Yi9mYWNlYm9va2xpa2UucGhwP2lkPTYwMDdhY2I5MTYyOGFhNmI5ODJiM2EyZDEyMDhkY2MyJmM9MjEyJm1faWQ9MTQzMzAyJnVpZD1jNzI5MDZkNjlm" border="0"><img src="http://mailing.gncellar.com/pub/goto.php?l=6007acb91628aa6b982b3a2d1208dcc2&u=c72906d69f&c_id=29822&l_id=737&cl_id=212&m_id=143302&url=aHR0cDovL21haWxpbmcuZ25jZWxsYXIuY29tL3B1Yi9pbWFnZXMvZmJvb2tfbGlrZS1lbi5naWY=" border="0" alt="Facebook like"></a>
            
   WWW.GARRAFEIRANACIONAL.COM


http://mailing.gncellar.com/pub/viewemail.php?id=6007acb91628aa6b982b3a2d1208dcc2&c=212&m_id=143302&uid=c72906d69f
http://mailing.gncellar.com/pub/recomendar.php?uid=c72906d69f&hash=6007acb91628aa6b982b3a2d1208dcc2&c=212&m_id=143302

http://mailing.gncellar.com/pub/rm.php?u=c72906d69f&l=737&c=212&e=6007acb91628aa6b982b3a2d1208dcc2&m_id=143302

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110325/79f0717c/attachment-0001.htm>

From luca at pca.it  Sat Mar 26 17:57:26 2011
From: luca at pca.it (Luca Capello)
Date: Sat, 26 Mar 2011 18:57:26 +0100
Subject: Bug#619746: gnutls-bin: [certtool] include useless data when creating
	a CSR
Message-ID: <87fwq9rchl.fsf@gismo.pca.it>

Package: gnutls-bin
Version: 2.10.5-1
Severity: important

Hi there!

I was creating a Certificate Signing Request with certtool and then I
discovered that the output file contains more than the CSR, even worse
it contains the password asked during the creation.

I could not find any reason for that, nor the manpage contains any hint
about how to output the CSR alone.  However, I found #522281:

  <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=522281#10>

On Thu, 11 Jun 2009 11:14:29 +0200, Simon Josefsson wrote:
> Matthew King <matthew.king at monnsta.net> writes:
>> If you attempt to use a pkcs8 private key with a template file, and that
>> template file does not specify the passphrase, certtool exits with an
>> error:
>>
>> certtool: importing --load-privkey: ca-key.pem: Decryption has failed.
>>
>> I am not sure which is worse - putting the passphrase in the template
>> file or asking questions in batch mode, but the patch to allow the
>> latter is simple:
[...]
> I believe an error message in this situation is reasonable: the reason
> for the template mode is to avoid interactive questions.  It would be
> wrong to ask questions for missing data in a template.
>
> Specifying a password in a template file is a security concern, but
> other files on Unix systems contains passwords and private keys so it is
> a well understood problem.  It is possible to protect these files using
> a restricted file mode.

Indeed, the output certtool now displays when creating a CSR seems to me
a template, albeit it includes the CSR at the end.

This is a big regression WRT to security and I do not share Simon's view
about putting password on files and protect them with restricted file
modes: by default, no password of any kind should be written on a file.

IMHO Severity: should be more than important, but neither the definition
of serious nor the one of grave seemed to fit what I just wrote above.

Thx, bye,
Gismo / Luca

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.38-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages gnutls-bin depends on:
ii  libc6                   2.11.2-13        Embedded GNU C Library: Shared lib
ii  libgcrypt11             1.4.6-5          LGPL Crypto library - runtime libr
ii  libgnutls26             2.10.5-1         the GNU TLS library - runtime libr
ii  libreadline6            6.1-3            GNU readline and history libraries
ii  libtasn1-3              2.9-2            Manage ASN.1 structures (runtime)
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

gnutls-bin recommends no packages.

gnutls-bin suggests no packages.

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 835 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110326/e7227dad/attachment.pgp>

From luca at pca.it  Sat Mar 26 18:15:18 2011
From: luca at pca.it (Luca Capello)
Date: Sat, 26 Mar 2011 19:15:18 +0100
Subject: Bug#619746: gnutls-bin: [certtool] include useless data when creating
	a CSR
In-Reply-To: <87fwq9rchl.fsf@gismo.pca.it> (Luca Capello's message of "Sat, 26
	Mar 2011 18:57:26 +0100")
References: <87fwq9rchl.fsf@gismo.pca.it>
Message-ID: <874o6prbnt.fsf@gismo.pca.it>

Hi there!

On Sat, 26 Mar 2011 18:57:26 +0100, Luca Capello wrote:
> Indeed, the output certtool now displays when creating a CSR seems to me
> a template, albeit it includes the CSR at the end.
>
> This is a big regression WRT to security and I do not share Simon's view
> about putting password on files and protect them with restricted file
> modes: by default, no password of any kind should be written on a file.
>
> IMHO Severity: should be more than important, but neither the definition
> of serious nor the one of grave seemed to fit what I just wrote above.

Now that I fully tested the CSR generation (sorry, my fault for not
having done this before), I am even more scared:
=====
luca at gismo:~$ #certtool --generate-request \
 --load-privkey pca.it.key --outfile gallery.pca.it.csr

luca at gismo:~$ ls -la ~/ | grep .ssl
drwx------  4 luca luca       4096 Dec 10 00:10 .ssl

luca at gismo:~$ ls -la ~/.ssl | grep private
drwx------  2 luca luca  4096 Mar 26 19:01 private

luca at gismo:~$ ls -la ~/.ssl/private/ | grep gallery
-rw-r--r-- 1 luca luca 4067 Mar 26 19:02 gallery.pca.it.csr
=====

If certtool must continue including "useless" informations in the CSR
output, at least it must create the output file with restricted file
mode.

Thx, bye,
Gismo / Luca
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 835 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110326/548990ac/attachment.pgp>

From nmav at gnutls.org  Sun Mar 27 07:38:13 2011
From: nmav at gnutls.org (Nikos Mavrogiannopoulos)
Date: Sun, 27 Mar 2011 09:38:13 +0200
Subject: Bug#619746: gnutls-bin: [certtool] include useless data when creating
	a CSR
In-Reply-To: <87fwq9rchl.fsf@gismo.pca.it>
References: <87fwq9rchl.fsf@gismo.pca.it>
Message-ID: <4D8EE965.60709@gnutls.org>

On 03/26/2011 06:57 PM, Luca Capello wrote:
> Package: gnutls-bin
> Version: 2.10.5-1
> Severity: important
> 
> Hi there!
> 
> I was creating a Certificate Signing Request with certtool and then I
> discovered that the output file contains more than the CSR, even worse
> it contains the password asked during the creation.
[...]
> =====
> luca at gismo:~$ #certtool --generate-request \
>  --load-privkey pca.it.key --outfile gallery.pca.it.csr
> 
> luca at gismo:~$ ls -la ~/ | grep .ssl
> drwx------  4 luca luca       4096 Dec 10 00:10 .ssl
> 
> luca at gismo:~$ ls -la ~/.ssl | grep private
> drwx------  2 luca luca  4096 Mar 26 19:01 private
> 
> luca at gismo:~$ ls -la ~/.ssl/private/ | grep gallery
> -rw-r--r-- 1 luca luca 4067 Mar 26 19:02 gallery.pca.it.csr
> =====

Hello,
 I don't quite understand what is the issue here. What is the
information contained in the CRQ that you consider "useless"?
Could you send a way for us to reproduce the problem or a wrongly
generated CRQ (and the way it was generated - the example
you have generates a valid CRQ for me).

regards,
Nikos




From nmav at gnutls.org  Sun Mar 27 07:38:13 2011
From: nmav at gnutls.org (Nikos Mavrogiannopoulos)
Date: Sun, 27 Mar 2011 09:38:13 +0200
Subject: Bug#619746: gnutls-bin: [certtool] include useless data when creating
	a CSR
In-Reply-To: <87fwq9rchl.fsf@gismo.pca.it>
References: <87fwq9rchl.fsf@gismo.pca.it>
Message-ID: <4D8EE965.60709@gnutls.org>

On 03/26/2011 06:57 PM, Luca Capello wrote:
> Package: gnutls-bin
> Version: 2.10.5-1
> Severity: important
> 
> Hi there!
> 
> I was creating a Certificate Signing Request with certtool and then I
> discovered that the output file contains more than the CSR, even worse
> it contains the password asked during the creation.
[...]
> =====
> luca at gismo:~$ #certtool --generate-request \
>  --load-privkey pca.it.key --outfile gallery.pca.it.csr
> 
> luca at gismo:~$ ls -la ~/ | grep .ssl
> drwx------  4 luca luca       4096 Dec 10 00:10 .ssl
> 
> luca at gismo:~$ ls -la ~/.ssl | grep private
> drwx------  2 luca luca  4096 Mar 26 19:01 private
> 
> luca at gismo:~$ ls -la ~/.ssl/private/ | grep gallery
> -rw-r--r-- 1 luca luca 4067 Mar 26 19:02 gallery.pca.it.csr
> =====

Hello,
 I don't quite understand what is the issue here. What is the
information contained in the CRQ that you consider "useless"?
Could you send a way for us to reproduce the problem or a wrongly
generated CRQ (and the way it was generated - the example
you have generates a valid CRQ for me).

regards,
Nikos




From ftpmaster at ftp-master.debian.org  Sun Mar 27 08:37:54 2011
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Sun, 27 Mar 2011 08:37:54 +0000
Subject: Processing of gnutls26_2.12.0-1_i386.changes
Message-ID: <E1Q3lTu-0007cL-35@franck.debian.org>

gnutls26_2.12.0-1_i386.changes uploaded successfully to localhost
along with the files:
  gnutls26_2.12.0-1.dsc
  gnutls26_2.12.0.orig.tar.bz2
  gnutls26_2.12.0-1.debian.tar.gz
  gnutls-doc_2.12.0-1_all.deb
  libgnutls-dev_2.12.0-1_i386.deb
  libgnutls26_2.12.0-1_i386.deb
  libgnutls26-dbg_2.12.0-1_i386.deb
  gnutls-bin_2.12.0-1_i386.deb
  guile-gnutls_2.12.0-1_i386.deb
  libgnutlsxx27_2.12.0-1_i386.deb
  libgnutls-openssl27_2.12.0-1_i386.deb

Greetings,

	Your Debian queue daemon (running on host franck.debian.org)


From ftpmaster at ftp-master.debian.org  Sun Mar 27 09:18:57 2011
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Sun, 27 Mar 2011 09:18:57 +0000
Subject: gnutls26_2.12.0-1_i386.changes ACCEPTED into experimental
Message-ID: <E1Q3m7d-0008LP-TQ@franck.debian.org>




Accepted:
gnutls-bin_2.12.0-1_i386.deb
  to main/g/gnutls26/gnutls-bin_2.12.0-1_i386.deb
gnutls-doc_2.12.0-1_all.deb
  to main/g/gnutls26/gnutls-doc_2.12.0-1_all.deb
gnutls26_2.12.0-1.debian.tar.gz
  to main/g/gnutls26/gnutls26_2.12.0-1.debian.tar.gz
gnutls26_2.12.0-1.dsc
  to main/g/gnutls26/gnutls26_2.12.0-1.dsc
gnutls26_2.12.0.orig.tar.bz2
  to main/g/gnutls26/gnutls26_2.12.0.orig.tar.bz2
guile-gnutls_2.12.0-1_i386.deb
  to main/g/gnutls26/guile-gnutls_2.12.0-1_i386.deb
libgnutls-dev_2.12.0-1_i386.deb
  to main/g/gnutls26/libgnutls-dev_2.12.0-1_i386.deb
libgnutls-openssl27_2.12.0-1_i386.deb
  to main/g/gnutls26/libgnutls-openssl27_2.12.0-1_i386.deb
libgnutls26-dbg_2.12.0-1_i386.deb
  to main/g/gnutls26/libgnutls26-dbg_2.12.0-1_i386.deb
libgnutls26_2.12.0-1_i386.deb
  to main/g/gnutls26/libgnutls26_2.12.0-1_i386.deb
libgnutlsxx27_2.12.0-1_i386.deb
  to main/g/gnutls26/libgnutlsxx27_2.12.0-1_i386.deb


Override entries for your package:
gnutls-bin_2.12.0-1_i386.deb - optional net
gnutls-doc_2.12.0-1_all.deb - optional doc
gnutls26_2.12.0-1.dsc - source devel
guile-gnutls_2.12.0-1_i386.deb - optional lisp
libgnutls-dev_2.12.0-1_i386.deb - optional libdevel
libgnutls-openssl27_2.12.0-1_i386.deb - standard libs
libgnutls26-dbg_2.12.0-1_i386.deb - extra debug
libgnutls26_2.12.0-1_i386.deb - standard libs
libgnutlsxx27_2.12.0-1_i386.deb - extra libs

Announcing to debian-devel-changes at lists.debian.org


Thank you for your contribution to Debian.


From comercial at konasexshop.com.br  Mon Mar 28 01:51:49 2011
From: comercial at konasexshop.com.br (Kona)
Date: Sun, 27 Mar 2011 21:51:49 -0400
Subject: De Pernas Pro Ar!!!!
Message-ID: <f5905eaefdae6a5b09e85e237624b93a@mkt.konasexshop.com.br>

An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110327/0b259556/attachment.htm>

From info at aldalegal.com  Mon Mar 28 23:10:31 2011
From: info at aldalegal.com (info at aldalegal.com)
Date: Mon, 28 Mar 2011 17:10:31 -0600
Subject: E.U driving licence in only 5 days! Car, bike, trailer, HGV, you
	pick the category.
Message-ID: <20110328171031.mfabnjs6iogsgowk@mail.aldalegal.com>

E.U driving licence in only 5 days! Car, bike, trailer, HGV, you pick  
the category.

BEAT THE SYSTEM WITH THEIR OWN RULES. Are you going to be  
disqualified? Medical renewal coming up? Have you failed your test  
because of nerves on the day. Have you been convicted of traffic  
offences where the judge has unfairly taken your licence away. Have  
you reached the age when you have to retake your test. Do you want to  
have more categories on your licence, ride a motorcycle for example or  
become a truck driver?

This service is for any resident or non-resident of the U.K or E.U. to  
obtain a full driving licence without any tests. So no matter what  
country you are resident or citizen of, we can help. Even if you live  
outside of the U.K or E.U! Once you have a driving licence through us,  
you can exchange it in your OWN country for a local licence. E.U.  
driving licences are accepted 'as is' worldwide for driving and  
exchange. It does not matter what nationality you are!


WWW.ALDALEGAL.COM

Yours Sincerely,

AldaLegal & Team
Paralegal Driving Exchange Service





From info at franchising.org.ua  Mon Mar 28 11:15:16 2011
From: info at franchising.org.ua (Franchise Association)
Date: Mon, 28 Mar 2011 14:15:16 +0300
Subject: =?koi8-r?B?08XNyc7B0iDQzyDG0sHO3sHK2snOx9Ug1yDExdTTy8/KIMnOxNXT1NLJySAtIDMxIM3B0tTB?=
Message-ID: <77A0AF7F83294886BCF49F36E1CECDEE@tuna-fish>

????????? ???????,
?????????? ??? ???????? ???????????? ??????? _??????????? ??? ??????????? ????? ??????? ??????? ? ??????? ?????????_.
??????? ????????? ? ?????? 15-?? ?????????? ?????????????? ?????? ??????? ??? ????? _BABY EXPO` 2011_.
????????????:
?????????? ????????????
??????????? ???????? _???? ??????????_
????????? ????????????? ????????:
1. ??????????? ??? ???????? ???????????????????
- ?????? ??????? ????????
- ????? ????????????
- ??? ??????? ????????
?????????: ??????? ???????? _ ???????? ???????????????? ???????? TeamVision
2. ??????????? ???????? Mortimer English Club - ????? ??????????? ????? ??? ????? ? ????????
?????????: ???? ??????? _ ??????-??????? ? ???????
3. ??????????? ???????? ???? ??????? ????????? _????????? ??????_ (???????, ?????? ? ?????, ??? ??? ??????? 0-3 ????)
?????????: ?????? ?????? _ ???????????? ?????? ?????????? ???? 
4. ??????????? ???????? ???? ????????? _????????? ????_ - ?????? ??? ???????? ??????????
?????????: ??????? ??????? ????????? _ ???????????? ???????? ??? _????? ??????? ???????_
5. ????????, ??? ?????????? ?????? ? ??????? ???????
?????????: ????? ????????? _ ??????? ???????? ????? franch.biz
???? ? ????? ??????????: 31 ?????. ? 10:00 ?? 13:00
????? ??????????: ????, ???, ?????????-??? _ 3
???????? ???? ????????, ??????? ? ???????????? ??????? ?????????  ?????????  ?????? ?? ??????????????? ????????????.
????????? ??????? ? ???? ?????????? ???????????  - 150 ???. ??????   ???????????? ? ????? ?? ????????.
?????????????????? ??? ??????????? ????????? ??????????? ????? ?? ????? www.babyexpo.ua ??? ???????? ?????? ?? skryplova at acco.kiev.ua
*********************
? ?????????, ?????????? ????????????,
??????? ???????, ????????????, ????????, ????????, ??????????
?????????? ???????? ?? ?????? ?????? ????????? ??????? 
+380 44 233 0361
+380 67 291 9771
www.franchising.org.ua
info at franchising.org.ua
*********************
?????? ??????????? ?????? ?????????o ???, ????????? ?? ?????????????? ????? ????????????. ?????????? ?? ???????? ?????, ???????? ????? ?? ??? ?????? ? ??????? "unsubscribe" 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110328/1e21b853/attachment.htm>

From messyeric33 at att.net  Tue Mar 29 12:13:43 2011
From: messyeric33 at att.net (Messy Eric)
Date: Tue, 29 Mar 2011 05:13:43 -0700 (PDT)
Subject: Hello my dear
Message-ID: <697165.53665.qm@web83915.mail.sp1.yahoo.com>

Hello my dear

My name is Messy.
I saw your email address when i was browsing through the internet searching for honest partner.
I want us to be friends and to know more about each other.
Please contact me back through my email address so that i can
send my picture to you and also tell you more about myself.
I believe that age, distance or color doesn't matter in a Serious relationship but love matters most.
I will be waiting to hear from you soon.
Thanks for your understanding.

With love from,
Messy.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110329/140b92f8/attachment.htm>

From luca at pca.it  Wed Mar 30 12:01:42 2011
From: luca at pca.it (Luca Capello)
Date: Wed, 30 Mar 2011 14:01:42 +0200
Subject: Bug#619746: gnutls-bin: [certtool] include useless data when creating
	a CSR
In-Reply-To: <4D8EE965.60709@gnutls.org> (Nikos Mavrogiannopoulos's message of
	"Sun, 27 Mar 2011 09:38:13 +0200")
References: <87fwq9rchl.fsf@gismo.pca.it> <4D8EE965.60709@gnutls.org>
Message-ID: <87r59o6cm1.fsf@gismo.pca.it>

Hi Nikos!

On Sun, 27 Mar 2011 09:38:13 +0200, Nikos Mavrogiannopoulos wrote:
> On 03/26/2011 06:57 PM, Luca Capello wrote:
>> I was creating a Certificate Signing Request with certtool and then I
>> discovered that the output file contains more than the CSR, even worse
>> it contains the password asked during the creation.
[...]
>  I don't quite understand what is the issue here. What is the
> information contained in the CRQ that you consider "useless"?

As I wrote, the "new" CSR (BTW, what does CRQ mean?) contains data other
than the request itself, e.g. the password in clear, example below.

> Could you send a way for us to reproduce the problem or a wrongly
> generated CRQ (and the way it was generated - the example
> you have generates a valid CRQ for me).

Please note that I never wrote that the resulting CSR is broken.  In
fact, I have not even tested the "new" CSR, but I used certtool in the
past in the very same way I am now trying to.

Here how to reproduce the problem:
=====
luca at gismo:~$ certtool --generate-privkey \
 --bits 4096 --outfile pca.it.key

luca at gismo:~$ certtool --generate-request \
 --load-privkey pca.it.key --outfile gallery.pca.it.csr
Generating a PKCS #10 certificate request...
Country name (2 chars): IT
Organization name: PCA
Organizational unit name:
Locality name: Casalpusterlengo
State or province name: Lodi
Common name: gallery.pca.it
UID:
Enter a dnsName of the subject of the certificate: gallery.pca.it
Enter a dnsName of the subject of the certificate:
Enter the IP address of the subject of the certificate:
Enter the e-mail of the subject of the certificate:
Enter a challenge password:
Does the certificate belong to an authority? (y/N): n
Will the certificate be used for signing (DHE and RSA-EXPORT ciphersuites)? (y/N): n
Will the certificate be used for encryption (RSA ciphersuites)? (y/N): n
Is this a TLS web client certificate? (y/N): n
Is this also a TLS web server certificate? (y/N): y

luca at gismo:~$ $ cat gallery.pca.it.csr
PKCS #10 Certificate Request Information:
        Version: 1
        Subject: C=IT,O=PCA,L=Casalpusterlengo,ST=Lodi,CN=gallery.pca.it
        Subject Public Key Algorithm: RSA
                Modulus (bits 4096):
                        [bits removed]
                Exponent:
                        01:00:01
        Attributes:
                Extensions:
                        Subject Alternative Name (not critical):
                                DNSname: gallery.pca.it
                        Basic Constraints (critical):
                                Certificate Authority (CA): FALSE
                        Key Usage (critical):
                                Digital signature.
                        Key Purpose (critical):
                                TLS WWW Server.
                Challenge password: asdf
Other Information:
        Public Key Id:
                [Public Key Id removed]

-----BEGIN NEW CERTIFICATE REQUEST-----
[request removed]
-----END NEW CERTIFICATE REQUEST-----

luca at gismo:~$ 
=====

Previous versions of certtool (at least the one I used in August 2008,
<http://snapshot.debian.org/package/gnutls26/2.4.1-1/>) generated a CSR
which contained only the part between the BEGIN and END separators.
This latter is AFAIK the only part needed for a CA (e.g. CAcert.org) and
it is what OpenSSL outputs per the following command:

  $ openssl req -nodes -new -key pca.it.key -out gallery.pca.it.csr

Thx, bye,
Gismo / Luca
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 835 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110330/e239625e/attachment.pgp>

From nmav at gnutls.org  Wed Mar 30 12:20:04 2011
From: nmav at gnutls.org (Nikos Mavrogiannopoulos)
Date: Wed, 30 Mar 2011 14:20:04 +0200
Subject: Bug#619746: gnutls-bin: [certtool] include useless data when creating
	a CSR
In-Reply-To: <87r59o6cm1.fsf@gismo.pca.it>
References: <87fwq9rchl.fsf@gismo.pca.it> <4D8EE965.60709@gnutls.org>
	<87r59o6cm1.fsf@gismo.pca.it>
Message-ID: <AANLkTinPkp=vBfbH-YsTpvNJeiKSLU4OTeCwPzOAYqhF@mail.gmail.com>

On Wed, Mar 30, 2011 at 2:01 PM, Luca Capello <luca at pca.it> wrote:

>> ?I don't quite understand what is the issue here. What is the
>> information contained in the CRQ that you consider "useless"?
> As I wrote, the "new" CSR (BTW, what does CRQ mean?) contains data other
> than the request itself, e.g. the password in clear, example below.

But this is how the PKCS #10 certificate request is designed. The
challenge password might be used by your CA to revoke your
certificate, and is stored in the clear. Does actually your CA require
that password? I'd expect to ask for something like that via an
out-band process.

>> Could you send a way for us to reproduce the problem or a wrongly
>> generated CRQ (and the way it was generated - the example
>> you have generates a valid CRQ for me).
> Please note that I never wrote that the resulting CSR is broken. ?In
> fact, I have not even tested the "new" CSR, but I used certtool in the
> past in the very same way I am now trying to.
[...]
> Previous versions of certtool (at least the one I used in August 2008,
> <http://snapshot.debian.org/package/gnutls26/2.4.1-1/>) generated a CSR
> which contained only the part between the BEGIN and END separators.

Ok, it seems I have misanderstood. I don't see however why printing the
text form of the encoded request is an issue here. Could you elaborate
on that? I can understand though that having stricter permissions for
the generated file might be needed.

regards,
Nikos




From luca at pca.it  Wed Mar 30 19:32:25 2011
From: luca at pca.it (Luca Capello)
Date: Wed, 30 Mar 2011 21:32:25 +0200
Subject: Bug#619746: gnutls-bin: [certtool] include useless data when creating
	a CSR
In-Reply-To: <AANLkTinPkp=vBfbH-YsTpvNJeiKSLU4OTeCwPzOAYqhF@mail.gmail.com>
	(Nikos Mavrogiannopoulos's message of "Wed, 30 Mar 2011 14:20:04
	+0200")
References: <87fwq9rchl.fsf@gismo.pca.it> <4D8EE965.60709@gnutls.org>
	<87r59o6cm1.fsf@gismo.pca.it>
	<AANLkTinPkp=vBfbH-YsTpvNJeiKSLU4OTeCwPzOAYqhF@mail.gmail.com>
Message-ID: <87lizw2yly.fsf@gismo.pca.it>

retitle 619746 gnutls-bin: [certtool] please create CSR outputs with stricter permission
tags 619746 + upstream
thanks

Hi Nikos!

On Wed, 30 Mar 2011 14:20:04 +0200, Nikos Mavrogiannopoulos wrote:
> On Wed, Mar 30, 2011 at 2:01 PM, Luca Capello <luca at pca.it> wrote:
>
>>> ?I don't quite understand what is the issue here. What is the
>>> information contained in the CRQ that you consider "useless"?
>> As I wrote, the "new" CSR (BTW, what does CRQ mean?) contains data other
>> than the request itself, e.g. the password in clear, example below.
>
> But this is how the PKCS #10 certificate request is designed. The
> challenge password might be used by your CA to revoke your
> certificate, and is stored in the clear.

Thank you for the explanation, I am not a SSL/TLS/CA expert.

> Does actually your CA require that password? I'd expect to ask for
> something like that via an out-band process.

As far as I remember, back in 2008 the CAcert.org we form did not ask me
for any password, but I could be wrong.

>> Previous versions of certtool (at least the one I used in August 2008,
>> <http://snapshot.debian.org/package/gnutls26/2.4.1-1/>) generated a CSR
>> which contained only the part between the BEGIN and END separators.
>
> Ok, it seems I have misanderstood. I don't see however why printing the
> text form of the encoded request is an issue here. Could you elaborate
> on that?

After your explanation, I do not see any problem with the "full" CSR and
TBH I prefer this way, given that it is easier to know the parameters
you have use to generated your CSR.

> I can understand though that having stricter permissions for the
> generated file might be needed.

Yes, please, it should be the same as `certtool --generate-privkey
--output output.key`, which creates output.key with mode 600.  I changed
the title of this bug to reflect where the problem is ;-)

Thx, bye,
Gismo / Luca
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 835 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110330/1b5075c9/attachment.pgp>

From owner at bugs.debian.org  Wed Mar 30 19:45:07 2011
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Wed, 30 Mar 2011 19:45:07 +0000
Subject: Processed: Re: Bug#619746: gnutls-bin: [certtool] include useless
	data when creating a CSR
In-Reply-To: <87lizw2yly.fsf@gismo.pca.it>
References: <87lizw2yly.fsf@gismo.pca.it>
Message-ID: <handler.s.C.130151418817972.transcript@bugs.debian.org>

Processing commands for control at bugs.debian.org:

> retitle 619746 gnutls-bin: [certtool] please create CSR outputs with stricter permission
Bug #619746 [gnutls-bin] gnutls-bin: [certtool] include useless data when creating a CSR
Changed Bug title to 'gnutls-bin: [certtool] please create CSR outputs with stricter permission' from 'gnutls-bin: [certtool] include useless data when creating a CSR'
> tags 619746 + upstream
Bug #619746 [gnutls-bin] gnutls-bin: [certtool] please create CSR outputs with stricter permission
Added tag(s) upstream.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
619746: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=619746
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From partnershipuk1 at rediffmail.com  Thu Mar 31 11:46:40 2011
From: partnershipuk1 at rediffmail.com (FROM DAVID GREEN)
Date: Thu, 31 Mar 2011 04:46:40 -0700 (PDT)
Subject: PARTNERSHIP AND TRANSFER
Message-ID: <3548.67489.qm@web180314.mail.gq1.yahoo.com>
















Dear Partner,
?
Kindly open the attached file and get back to me.
?
Thank you.
?
Mr David Green




?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110331/bddf2007/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PARTNERSHIP AND TRANSFER.rtf
Type: application/msword
Size: 3443 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110331/bddf2007/attachment.wiz>

From jolihi-nice at umail.hinet.net  Thu Mar 31 13:48:12 2011
From: jolihi-nice at umail.hinet.net (=?big5?B?qsW2obresnqxTa5h?=)
Date: Thu, 31 Mar 2011 21:48:12 +0800 (CST)
Subject: =?big5?B?vuOyeqrFtqGquqZuwLCk4g==?=
Message-ID: <771879210.1301579294285.JavaMail.nobody@sg4000-ap-1>

An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110331/7d5abc57/attachment.htm>

From lopez.c at qip.ru  Wed Mar 30 17:10:49 2011
From: lopez.c at qip.ru (Dr. Charles Lopez)
Date: Thu, 31 Mar 2011 01:10:49 +0800
Subject: Confirm Your Awareness
Message-ID: <808875.86873.qm@smtp104.biz.mail.bf1.yahoo.com>

HSBC BANK PLC MALAYSIA.(REGISTERED NO.1026167).
ADDRESS: BANGUNAN HSBC 2 LEBOH AMPANG
50130 KUALA LUMPUR, AMPANG, MALAYSIA.
Chairman Committee on Foreign Contracts And
Inheritance Fund Payment Notification
FROM: HSBC BANK MALAYSIA.
 
Attn: Beneficiary,
 
The U.S.A Government, World Bank And United Nations Organization Official has approved to pay you part 
payment of your Contract/Inheritance Fund Payment in conjunction with the European Union and World 
Bank Of Switzerland.

This International remittance department (HSBC BANK PLC MALAYSIA) was set up to discover an 
outstanding & unpaid fund being owed to Governments or Individuals all over the world through Contract 
Payment, Inheritance and Lottery Winning Prize Awards. Hence, the decision was taken last week. However, 
with this development, a woman by name (MRS: JANET WHITE) came to our office with an application 
stating that You gave her the power of attorney to be the beneficiary of your Outstanding 
Contract/Inheritance/award funds.

She made us to believe that you are dead and that she is your next of kin. We got your email Address and 
decided to send an email through this address hoping to find out if you are dead or alive. And also, to find 
out if you had at any time given this woman the power of attorney to represent you. Please let us know 
also if you are aware that we are almost ready to transfer part payment of $5.5m USD of your outstanding 
funds to her nominated bank account stated below:

Bank Name:  Bank Of America
Address:1723 Palmdale Bulv.
Palmdale Ca.  93550
Acct # : 00867-87680
Rout # : 026008391
Swift code # :Bofaus4N
Beneficiary: JANET WHITE

If you are not aware of the above instruction, do respond to this email Immediately by contacting the 
Director of the International Remittance Department (HSBC MALAYSIA).His contact information is written 
below:

Name: Mr. Rechard Lee
Email: foreignremittancedeptft at gmail.com
Tel:    +60129161275

For immediate transfer of your funds be informed that you are not allowed to correspond or contact any 
person or office with respect to this transfer other than this office, you are required to send to him an  email 
with your full following information below:

1) YOUR FULL NAME__________________
2) RESIDENCE ADDRESS, CITY, STATE AND
COUNTRY_______________________
3) PERSONAL CELL PHONE, FAX AND MOBILE PHONE
NUMBER_________________________

Yours Sincerely,


Dr. Charles Lopez. 


From info at franchising.org.ua  Wed Mar 30 13:38:45 2011
From: info at franchising.org.ua (Franchise Association)
Date: Wed, 30 Mar 2011 16:38:45 +0300
Subject: =?koi8-r?B?08XNyc7B0iDQzyDG0sHO3sHK2snOx9Ug1yDExdTTy8/KIMnOxNXT1NLJySAtIDMxIM3B0tTB?=
Message-ID: <9206C0B9EC784A5A9EC8765813024BAC@tuna-fish>

????????? ???????,
?????????? ??? ???????? ???????????? ??????? _??????????? ??? ??????????? ????? ??????? ??????? ? ??????? ?????????_.
??????? ????????? ? ?????? 15-?? ?????????? ?????????????? ?????? ??????? ??? ????? _BABY EXPO` 2011_.
????????????:
?????????? ????????????
??????????? ???????? _???? ??????????_
????????? ????????????? ????????:
1. ??????????? ??? ???????? ???????????????????
- ?????? ??????? ????????
- ????? ????????????
- ??? ??????? ????????
?????????: ??????? ???????? _ ???????? ???????????????? ???????? TeamVision
2. ??????????? ???????? Mortimer English Club - ????? ??????????? ????? ??? ????? ? ????????
?????????: ???? ??????? _ ??????-??????? ? ???????
3. ??????????? ???????? ???? ??????? ????????? _????????? ??????_ (???????, ?????? ? ?????, ??? ??? ??????? 0-3 ????)
?????????: ?????? ?????? _ ???????????? ?????? ?????????? ???? 
4. ??????????? ???????? ???? ????????? _????????? ????_ - ?????? ??? ???????? ??????????
?????????: ??????? ??????? ????????? _ ???????????? ???????? ??? _????? ??????? ???????_
5. ????????, ??? ?????????? ?????? ? ??????? ???????
?????????: ????? ????????? _ ??????? ???????? ????? franch.biz
???? ? ????? ??????????: 31 ?????. ? 10:00 ?? 13:00
????? ??????????: ????, ???, ?????????-??? _ 3
???????? ???? ????????, ??????? ? ???????????? ??????? ?????????  ?????????  ?????? ?? ??????????????? ????????????.
????????? ??????? ? ???? ?????????? ???????????  - 150 ???. ??????   ???????????? ? ????? ?? ????????.
?????????????????? ??? ??????????? ????????? ??????????? ????? ?? ????? www.babyexpo.ua ??? ???????? ?????? ?? skryplova at acco.kiev.ua
*********************
? ?????????, ?????????? ????????????,
??????? ???????, ????????????, ????????, ????????, ??????????
?????????? ???????? ?? ?????? ?????? ????????? ??????? 
+380 44 233 0361
+380 67 291 9771
www.franchising.org.ua
info at franchising.org.ua
*********************
?????? ??????????? ?????? ?????????o ???, ????????? ?? ?????????????? ????? ????????????. ?????????? ?? ???????? ?????, ???????? ????? ?? ??? ?????? ? ??????? "unsubscribe" 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20110330/e95e6d16/attachment.htm>

From bogus@does.not.exist.com  Mon Mar 21 21:14:43 2011
From: bogus@does.not.exist.com ()
Date: Mon, 21 Mar 2011 21:14:43 -0000
Subject: No subject
Message-ID: <mailman.326.1305658674.19993.pkg-gnutls-maint@lists.alioth.debian.org>

The Euro Millions Lottery is pleased to inform you that you
emerged a winner of ?2,500,000.00 Euro in the last concluded National
Lottery online draws on 15th May,2011. Email addresses were assigned to
different ticket numbers for the draws.
For privacy provide all the information below and send it
to the Lottery Fiduciary agent with the following email address
Name:Alfred Pennington
E-mail Address: rfbpsptks at gmail.com
Tel:+44 70457 12180
1.First Name,2.Last Name,3.Your Ref:,4.Address:,5.Country:,6.Telephone:
7.Occupation:,8.Age

Congratulations.
Rebecca Chazan,
Online Co-ordinator.