[Pkg-swan-devel] Bug#918668: strongswan: root ca certificates not loaded since updated to 5.7.2-1

[Panagiotis Malakoudis]

Package: strongswan
Version: 5.7.2-1
Severity: important



-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-1-amd64 (SMP w/16 CPU cores)
Locale: LANG=el_GR.UTF-8, LC_CTYPE=el_GR.UTF-8 (charmap=UTF-8), LANGUAGE=el_GR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages strongswan depends on:
ii  strongswan-charon   5.7.2-1
ii  strongswan-starter  5.7.2-1

strongswan recommends no packages.

strongswan suggests no packages.

-- no debconf information

systemlog snapshot
------------------
Ιαν 08 10:28:32 ryzenpc charon-nm[6196]: 05[LIB] building CRED_CERTIFICATE - X509 failed, tried 6 builders
Ιαν 08 10:28:32 ryzenpc charon-nm[6196]: 05[CFG] loading CA certificate '/etc/ssl/certs/a2c66da8.0' failed
Ιαν 08 10:28:32 ryzenpc charon-nm[6196]: 05[LIB] building CRED_CERTIFICATE - X509 failed, tried 6 builders
Ιαν 08 10:28:32 ryzenpc charon-nm[6196]: 05[CFG] loading CA certificate '/etc/ssl/certs/Trustis_FPS_Root_CA.pem' failed
Ιαν 08 10:28:32 ryzenpc charon-nm[6196]: 05[LIB] building CRED_CERTIFICATE - X509 failed, tried 6 builders
Ιαν 08 10:28:32 ryzenpc charon-nm[6196]: 05[CFG] loading CA certificate '/etc/ssl/certs/GeoTrust_Primary_Certification_Authority_-_G3.pem' failed
Ιαν 08 10:28:32 ryzenpc charon-nm[6196]: 05[LIB] building CRED_CERTIFICATE - X509 failed, tried 6 builders
Ιαν 08 10:28:32 ryzenpc charon-nm[6196]: 05[CFG] loading CA certificate '/etc/ssl/certs/e60bf0c0.0' failed
Ιαν 08 10:28:32 ryzenpc charon-nm[6196]: 05[LIB] building CRED_CERTIFICATE - X509 failed, tried 6 builders
Ιαν 08 10:28:32 ryzenpc charon-nm[6196]: 05[CFG] loading CA certificate '/etc/ssl/certs/COMODO_ECC_Certification_Authority.pem' failed

All root ca certificates fail to build. All worked fine before upgrading to 5.7.2-1