Bug#836822: ocsptool --ask output corrupted

Stefan Bühler stbuehler at lighttpd.net
Tue Sep 6 09:01:40 UTC 2016


Package: gnutls-bin
Version: 3.3.8-6+deb8u3

The output file containing the DER-encoded OCSP response starts with a
newline; ocsptool itself can't read the file anymore, failing with:

importing response: ASN1 parser: Error in TAG.

This was fixed upstream in commit e95d7d1a (first released with 3.5.0):

https://gitlab.com/gnutls/gnutls/commit/e95d7d1aca6f5e078f354c22b85d961ded8e16a1

with commit message:

> ocsptool: Allow saving responses even if verification fails
>
> In addition do not enter a spurious newline to responses.

Somehow the more important thing was not the subject :(

As this never worked before I'm not assigning any severity.

Not sure how to tell the bug tracker that stretch/sid are not
affected :)



More information about the Pkg-gnutls-maint mailing list