Bug#532584: libshibsp1: Backchannel fails to contact AA
cantor.2 at osu.edu
Wed Jun 10 23:05:53 UTC 2009
Russ Allbery wrote on 2009-06-10:
> http://marc.info/?t=96963077100003&r=1&w=2 seems to point at this error
> being either a bug in how the OpenSSL routines are called or a bug in
> the certificate configuration. Since it works for you manually with
> curl, I suspect there's something different between how XMLTooling is
> calling curl versus what the command-line program does (including
> perhaps loading different certs).
I think this is the reference you want:
Something in debian got updated and corrupted a CA list. What I can't
explain is why libcurl is even looking at it, but I'll look into that if I
can reproduce that elsewhere.
I override the trust processing libcurl does anyway, but it may still be
installing the root list even though it gets ignored later.
More information about the Pkg-shibboleth-devel