Bug#532584: libshibsp1: Backchannel fails to contact AA

[Francesco Malvezzi]

Russ Allbery ha scritto:
> "Scott Cantor" <cantor.2 at osu.edu> writes:
> 
>> I think this is the reference you want:
>>
>> http://marc.info/?t=123721089000002&r=1&w=2
>>
>> Something in debian got updated and corrupted a CA list. What I can't
>> explain is why libcurl is even looking at it, but I'll look into that
>> if I can reproduce that elsewhere.
>>
>> I override the trust processing libcurl does anyway, but it may still be
>> installing the root list even though it gets ignored later.
> 
> Ah, yes.  If that's the case, then cleaning up the certificates in
> /etc/ssl/certs to remove the duplicate should resolve the problem.
> 
> http://marc.info/?l=openssl-users&m=123729123505080&w=2 seems to be the
> relevant solution.

After clearing all certificates from /etc/ssl/certs it works.

So it was me the dummy one to put the same certificate twice in
/etc/ssl/certs

Thank you so much, to whom should I send a gift certificate?

Francesco