Bug#619746: gnutls-bin: [certtool] include useless data when creating a CSR
nmav at gnutls.org
Sun Mar 27 07:38:13 UTC 2011
On 03/26/2011 06:57 PM, Luca Capello wrote:
> Package: gnutls-bin
> Version: 2.10.5-1
> Severity: important
> Hi there!
> I was creating a Certificate Signing Request with certtool and then I
> discovered that the output file contains more than the CSR, even worse
> it contains the password asked during the creation.
> luca at gismo:~$ #certtool --generate-request \
> --load-privkey pca.it.key --outfile gallery.pca.it.csr
> luca at gismo:~$ ls -la ~/ | grep .ssl
> drwx------ 4 luca luca 4096 Dec 10 00:10 .ssl
> luca at gismo:~$ ls -la ~/.ssl | grep private
> drwx------ 2 luca luca 4096 Mar 26 19:01 private
> luca at gismo:~$ ls -la ~/.ssl/private/ | grep gallery
> -rw-r--r-- 1 luca luca 4067 Mar 26 19:02 gallery.pca.it.csr
I don't quite understand what is the issue here. What is the
information contained in the CRQ that you consider "useless"?
Could you send a way for us to reproduce the problem or a wrongly
generated CRQ (and the way it was generated - the example
you have generates a valid CRQ for me).
More information about the Pkg-gnutls-maint