On Mon, Jun 28, 2010 at 01:05:56PM -0400, Paul Wouters wrote:
> On Mon, 28 Jun 2010, Rene Mayrhofer wrote:
> 
> >On Monday 28 June 2010 07:51:07 Harald Jenny wrote:
> >>Sorry Paul but I don't think the currect behaviour is correct - there is no
> >>indication for the user why *id is ignored and this is not good :-(.
> >I would tend to agree with that...
> 
> On 2.6, it should have a leftid=%fromcert

Ok

> 
> This change was made because in 2.4 it ALWAYS took the id from cert, and you 
> could
> not override it.

So setting leftid in 2.4 with a cert would have had no effect? But if a 
certificate wasn't there it would use it correct?

> Now it takes the id from leftid= but you have to tell it to pick
> it up from the cert.

Hmmm ok

> 
> But imho, this has nothing to do with this "bug".

Well I think we have to things here, first hte missing cert file and second the 
usage of the id line.

> If you have a conn with a broken
> leftcert= pointing to a non-existing file, it can't work.

Well true but in one of the last mails you said that this cannot be considered 
a bug per se as you told me that one could copy the cert in after adding but 
before starting the connection, so negating to add the connection without an 
existing certificate is not an option for you.

> It cannot grab the id from
> the cert since the cert is not there. I still dont understand how that could 
> ever "work"
> on 2.4.

:-) I guess because the cert was not there it just used the id - please see the 
pseudo code:

2.4

IF (CERT)
  ADD_CERT
ENDIF
ADD_ID

2.6

IF (CERT)
  ADD_CERT
  ADD_ID
ENDIF

> 
> I am getting increasingly frustrated with this.

Sorry but I see the point the user tries to make and as without users software 
won't be used i guess we should try to find some kind of solution?

> It needs a much better explanation of
> how it can "work". And "work" should be more then "loads the conn that has no 
> chance of
> ever working"

Please look above I guess the pseudo code is just how it worked. Btw, how is it 
supposed to work to later add the cert to the conn when the id cannot be 
determined at the time of adding the conn?

> 
> Paul

Harald



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to