[Pkg-openssl-devel] Bug#611102: Bug#622679: libssl1.0.0: certificate verification fails for about every server

Wed Apr 13 20:15:15 UTC 2011

reassign 622679 openssl
found 622679 1.0.0d-1
merge 611102 622679
severity 611102 serious
thanks

On 2011-04-13 21:09 +0200, Sven Joachim wrote:

> Package: libssl1.0.0
> Version: 1.0.0d-1
> Severity: important
>
> It seems all the certificates in /etc/ssl/certs have become pretty much
> useless now, because just about every connection fails either with error
> 20 (unable to get local issuer certificate) or error 19 (self signed
> certificate in certificate chain)

On debian-user-german, Sven Hartge noted that this is because of bug
#611102, I'm merging the bugs.  And bumping the severity, because now
either libssl1.0.0 programs or GNUTLS/libssl0.9.8 programs will be
broken, depending on whether you run update-ca-certificates or not. :-/

Regards,
        Sven