Bug#532584: libshibsp1: Backchannel fails to contact AA

[Scott Cantor]

Russ Allbery wrote on 2009-06-10:
> http://marc.info/?t=96963077100003&r=1&w=2 seems to point at this error
> being either a bug in how the OpenSSL routines are called or a bug in
> the certificate configuration.  Since it works for you manually with
> curl, I suspect there's something different between how XMLTooling is
> calling curl versus what the command-line program does (including
> perhaps loading different certs).

I think this is the reference you want:

http://marc.info/?t=123721089000002&r=1&w=2

Something in debian got updated and corrupted a CA list. What I can't
explain is why libcurl is even looking at it, but I'll look into that if I
can reproduce that elsewhere.

I override the trust processing libcurl does anyway, but it may still be
installing the root list even though it gets ignored later.

-- Scott