Bug#619746: gnutls-bin: [certtool] include useless data when creating a CSR

[Nikos Mavrogiannopoulos]

On 03/26/2011 06:57 PM, Luca Capello wrote:
> Package: gnutls-bin
> Version: 2.10.5-1
> Severity: important
> 
> Hi there!
> 
> I was creating a Certificate Signing Request with certtool and then I
> discovered that the output file contains more than the CSR, even worse
> it contains the password asked during the creation.
[...]
> =====
> luca at gismo:~$ #certtool --generate-request \
>  --load-privkey pca.it.key --outfile gallery.pca.it.csr
> 
> luca at gismo:~$ ls -la ~/ | grep .ssl
> drwx------  4 luca luca       4096 Dec 10 00:10 .ssl
> 
> luca at gismo:~$ ls -la ~/.ssl | grep private
> drwx------  2 luca luca  4096 Mar 26 19:01 private
> 
> luca at gismo:~$ ls -la ~/.ssl/private/ | grep gallery
> -rw-r--r-- 1 luca luca 4067 Mar 26 19:02 gallery.pca.it.csr
> =====

Hello,
 I don't quite understand what is the issue here. What is the
information contained in the CRQ that you consider "useless"?
Could you send a way for us to reproduce the problem or a wrongly
generated CRQ (and the way it was generated - the example
you have generates a valid CRQ for me).

regards,
Nikos