Bug#812488: libsms-send-perl: After upgrade: Can't send SMS: 500 Can't connect to api.twilio.com:443 (certificate verify failed)

[gregor herrmann]

Control: reassign -1 ca-certificates 20141019+deb8u1

On Sun, 24 Jan 2016 12:32:39 +0100, Rosario Maddox wrote:

> Yesterday I did: sudo apt-get upgrade, and I have this now:
> Can't send SMS: 500 Can't connect to api.twilio.com:443 (certificate
> verify failed) at /usr/share/perl5/SMS/Send.pm line 270.
> 
> Basically, something is wrong with checking of certificates. This may be
> due to other package, but I cannot identify it.

I assume this was a dist-upgrade to to new 8.3 point release.
Since libsms-send-perl was not invvolved and has't changed its code
since years, the problem must indeed originate somewhere else.

Looking at
https://lists.debian.org/debian-announce/2016/msg00001.html , the
ca-certificates package looks like a plausible source, and its
changelog mentions that some CA certs were removed:
http://metadata.ftp-master.debian.org/changelogs/main/c/ca-certificates/ca-certificates_20141019+deb8u1_changelog
(some history in https://bugs.debian.org/806239 ).

Further investigation shows that api.twilio.com uses some thawte
cert, and the changelog above shows that some thawte CAs have been
removed; not sure if they are exactly the same but this might be the
cause of your problems.

So far for a preliminary investigation; since this does not happen on
the libsms-send-perl side, I'm reassiging the bug to ca-certificates
for now.


Cheers,
gregor

-- 
 .''`.  Homepage https://info.comodo.priv.at/ - OpenPGP key 0xBB3A68018649AA06
 : :' : Debian GNU/Linux user, admin, and developer -  https://www.debian.org/
 `. `'  Member of VIBE!AT & SPI, fellow of the Free Software Foundation Europe
   `-   NP: Flying Pickets: Masters of war
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: Digital Signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-perl-maintainers/attachments/20160124/a5a84e46/attachment.sig>