On Mon, Jun 28, 2010 at 01:05:56PM -0400, Paul Wouters wrote: > On Mon, 28 Jun 2010, Rene Mayrhofer wrote: > > >On Monday 28 June 2010 07:51:07 Harald Jenny wrote: > >>Sorry Paul but I don't think the currect behaviour is correct - there is no > >>indication for the user why *id is ignored and this is not good :-(. > >I would tend to agree with that... > > On 2.6, it should have a leftid=%fromcert
Ok > > This change was made because in 2.4 it ALWAYS took the id from cert, and you > could > not override it. So setting leftid in 2.4 with a cert would have had no effect? But if a certificate wasn't there it would use it correct? > Now it takes the id from leftid= but you have to tell it to pick > it up from the cert. Hmmm ok > > But imho, this has nothing to do with this "bug". Well I think we have to things here, first hte missing cert file and second the usage of the id line. > If you have a conn with a broken > leftcert= pointing to a non-existing file, it can't work. Well true but in one of the last mails you said that this cannot be considered a bug per se as you told me that one could copy the cert in after adding but before starting the connection, so negating to add the connection without an existing certificate is not an option for you. > It cannot grab the id from > the cert since the cert is not there. I still dont understand how that could > ever "work" > on 2.4. :-) I guess because the cert was not there it just used the id - please see the pseudo code: 2.4 IF (CERT) ADD_CERT ENDIF ADD_ID 2.6 IF (CERT) ADD_CERT ADD_ID ENDIF > > I am getting increasingly frustrated with this. Sorry but I see the point the user tries to make and as without users software won't be used i guess we should try to find some kind of solution? > It needs a much better explanation of > how it can "work". And "work" should be more then "loads the conn that has no > chance of > ever working" Please look above I guess the pseudo code is just how it worked. Btw, how is it supposed to work to later add the cert to the conn when the id cannot be determined at the time of adding the conn? > > Paul Harald -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org