Bug#640639: libcurl: CURLE_SSL_CACERT_BADFILE error when all CAs in ca-certificates disabled

Jonathan Nieder jrnieder at gmail.com
Mon Sep 5 22:59:35 UTC 2011


Package: libcurl3-gnutls
Version: 7.21.7-1

Today I ran into a weird error:

| $ git fetch
| error:  while accessing https://github.com/torvalds/linux.git/info/refs

The cause was that git does not fall back to curl_easy_strerror() when
the error buffer is empty, as discussed at [1].  Easy enough to work
around that:

| $ git fetch
| error: Problem with the SSL CA cert (path? access rights?) while accessing https://github.com/torvalds/linux.git/info/refs

"Is ca-certificates broken?" I start to wonder.  But no, now I
remember: I just had disabled all CAs at the debconf prompt since I
have no reason to trust them.

| $ ls -l /etc/ssl/certs/ca-certificates.crt
| -rw-r--r-- 1 root root 0 Sep  2 00:07 /etc/ssl/certs/ca-certificates.crt

This is probably a libgnutls bug, but since I haven't pinned it down
I'm filing it here.  Known problem?

Thanks,
Jonathan

[1] http://thread.gmane.org/gmane.comp.version-control.git/180764

$ dpkg-query -W libgnutls26
libgnutls26	2.12.10-1





More information about the Pkg-gnutls-maint mailing list