Package: alpine Version: 2.02-3+b1 Severity: normal When connecting, fails with message "unable to get local issuer certificate".
Manually checking the certificate chain with openssl s_client and gnutls-cli shows no problems. The CN correctly matches the hostname and the root cert is in my /etc/ssl/certs/ca-certificates.crt and linked from /etc/ssl/certs. I could not ascertain precisely from where alpine gets it root cert list.. This seems to have started since the last upgrade to 2.02-3+b1 which seems relevant. Downgrading to 2.02-3 fixes the issue. Random aside: alpine is linked against both libssl.so.1.0.0 and libgnutls.so.26 !?! Let me know if you want the hostname and certificate chain and I'll forward that privately. -- System Information: Debian Release: wheezy/sid APT prefers testing APT policy: (900, 'testing'), (800, 'unstable'), (700, 'experimental') Architecture: i386 (i686) Kernel: Linux 2.6.38-2-686 (SMP w/1 CPU core) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages alpine depends on: ii libc6 2.11.2-11 Embedded GNU C Library: Shared lib ii libgssapi-krb5-2 1.9+dfsg-1+b1 MIT Kerberos runtime libraries - k ii libkrb5-3 1.9+dfsg-1+b1 MIT Kerberos runtime libraries ii libldap-2.4-2 2.4.23-7 OpenLDAP libraries ii libncurses5 5.7+20100313-5 shared libraries for terminal hand ii libpam0g 1.1.2-2 Pluggable Authentication Modules l ii libssl1.0.0 1.0.0d-2 SSL shared libraries Versions of packages alpine recommends: pn alpine-doc <none> (no description available) Versions of packages alpine suggests: ii aspell 0.60.6-6 GNU Aspell spell-checker ii esmtp-run [mail-transport-age 1.2-5 user configurable relay-only MTA - -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
