Your message dated Tue, 12 Jan 2010 22:17:47 +0000
with message-id <e1nup3b-0000zr...@ries.debian.org>
and subject line Bug#563253: fixed in evolution 2.28.2-2
has caused the Debian Bug report #563253,
regarding libnss3-1d: Fails to verify the certificate of my company email server
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
563253: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=563253
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libnss3-1d
Version: 3.12.5-1
Severity: grave
Justification: renders package unusable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Since upgrading libnss3-1d to 3.12.5, I have been unable to connect to my
company's email server. Evolution gives me this dialog:
SSL Certificate check for imap.example.com:
Issuer: serialNumber=88888888,CN=Go Daddy Secure Certification
Authority,OU=http://certificates.godaddy.com/repository,O="GoDaddy.com,
Inc.",L=Scottsdale,ST=Arizona,C=US
Subject: CN=*.example.com,OU=Domain Control Validated,O=*.example.com
Fingerprint: ec:cf:43:7f:87:84:f0:63:ec:b4:5d:60:e5:7e:6b:23
Signature: BAD
No problem with iceweasel, thunderbird, etc. but they don't appear to use the
split-out package of NSS.
I reported the same bug against gnutls, #563127. The maintainer found that
gnutls refused to accept the certificate because it was issues by a "V1 CA".
Sadly I'm no X.509 expert so I don't know what that really means. The
certificate in question was issued in April 2009, so it's not exactly ancient.
Please tell me if you'd like the server address to debug this further yourself,
or whether there are any command line utilities for NSS that I can use as the
equivalent of gnutls-bin/'openssl s_client' to debug further.
Because this coincides with the upgrade from 3.12.4 to 3.12.5 I am assuming
that NSS made a similar policy change to GnuTLS, to stop trusting V1 CAs. If
this is the kind of thing that a user of NSS can override, please let me know
and I'll forward that information to the (evolution) upstream bug at
<https://bugzilla.gnome.org/show_bug.cgi?id=605773>.
- -- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (430, 'testing'), (420, 'unstable'), (410, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.32-trunk-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages libnss3-1d depends on:
ii dpkg 1.15.5.4 Debian package management system
ii libc6 2.10.2-2 GNU C Library: Shared libraries
ii libnspr4-0d 4.8.2-1 NetScape Portable Runtime Library
ii libsqlite3-0 3.6.21-2 SQLite 3 shared library
ii zlib1g 1:1.2.3.3.dfsg-15 compression library - runtime
libnss3-1d recommends no packages.
libnss3-1d suggests no packages.
- -- no debconf information
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAks9+IoACgkQshl/216gEHgbmgCg4/dEMui2RE3t+GgVJ9je7ouJ
AB0AmgOjth0/Cy2emJ/RkhIl56IzQ0Ec
=kMHW
-----END PGP SIGNATURE-----
--- End Message ---
--- Begin Message ---
Source: evolution
Source-Version: 2.28.2-2
We believe that the bug you reported is fixed in the latest version of
evolution, which is due to be installed in the Debian FTP archive:
evolution-common_2.28.2-2_all.deb
to main/e/evolution/evolution-common_2.28.2-2_all.deb
evolution-dbg_2.28.2-2_amd64.deb
to main/e/evolution/evolution-dbg_2.28.2-2_amd64.deb
evolution-dev_2.28.2-2_amd64.deb
to main/e/evolution/evolution-dev_2.28.2-2_amd64.deb
evolution-plugins-experimental_2.28.2-2_amd64.deb
to main/e/evolution/evolution-plugins-experimental_2.28.2-2_amd64.deb
evolution-plugins_2.28.2-2_amd64.deb
to main/e/evolution/evolution-plugins_2.28.2-2_amd64.deb
evolution_2.28.2-2.diff.gz
to main/e/evolution/evolution_2.28.2-2.diff.gz
evolution_2.28.2-2.dsc
to main/e/evolution/evolution_2.28.2-2.dsc
evolution_2.28.2-2_amd64.deb
to main/e/evolution/evolution_2.28.2-2_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 563...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Yves-Alexis Perez <cor...@debian.org> (supplier of updated evolution package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 12 Jan 2010 21:37:26 +0100
Source: evolution
Binary: evolution evolution-common evolution-dev evolution-dbg
evolution-plugins evolution-plugins-experimental
Architecture: source all amd64
Version: 2.28.2-2
Distribution: unstable
Urgency: low
Maintainer: Debian Evolution Maintainers
<pkg-evolution-maintain...@lists.alioth.debian.org>
Changed-By: Yves-Alexis Perez <cor...@debian.org>
Description:
evolution - groupware suite with mail client and organizer
evolution-common - architecture independent files for Evolution
evolution-dbg - debugging symbols for Evolution
evolution-dev - development library files for Evolution
evolution-plugins - standard plugins for Evolution
evolution-plugins-experimental - experimental plugins for Evolution
Closes: 548510 563034 563253
Changes:
evolution (2.28.2-2) unstable; urgency=low
.
[ Josselin Mouette ]
* Drop libgnomeprint build-dependencies.
.
[ Yves-Alexis Perez ]
* debian/po:
- Try to really remove spurious spaces in debconf templates and unfuzzy
translations. closes: #548510
- add pt_BR.po, thanks Fábio Ferreira. closes: #563034
* debian/patches:
- 02_let-nss-search-for-nssckbi added, fix nss modules lookup, should fix
certificate verification in evolution. closes: #563253
Checksums-Sha1:
8cf2116f4d5a5f1d0ccc91803d592373339a13fa 3684 evolution_2.28.2-2.dsc
7cb7d94d2ccb19dc6ff10ebf77449303810beb0c 35311 evolution_2.28.2-2.diff.gz
ed6ed1587da2b6b2bd95906a41e87c4d65e8cc8d 26464164
evolution-common_2.28.2-2_all.deb
abfb974087adc8895f175f0727f6143571bde6f3 3456122 evolution_2.28.2-2_amd64.deb
fba2a4e1d285e90848dbd24c38c89dc7640f2b2f 338650
evolution-dev_2.28.2-2_amd64.deb
88004012fb4045250a40acba90703f1d61fecad9 7976664
evolution-dbg_2.28.2-2_amd64.deb
83de1e9b233ead59411161991249b3eadc2308e0 218350
evolution-plugins_2.28.2-2_amd64.deb
3ea83ece191bbc07423752d2facb5193650f771e 187890
evolution-plugins-experimental_2.28.2-2_amd64.deb
Checksums-Sha256:
4f0b5f64131385a915ed6f00b412246e0c1e6a419209e2eaff30fcdbe5055842 3684
evolution_2.28.2-2.dsc
ea0677fde9c9a7b22cd28bf34b38d421c1c0a7dc15d378c9316f2992b636a279 35311
evolution_2.28.2-2.diff.gz
775bc9f0f56857fb091252ec0afd63b6240010c9d7a8ae1c75254b95bbdbcf73 26464164
evolution-common_2.28.2-2_all.deb
0bd77e48115e8271457e97f4c0edef857e832c3fcaf73bd659c42a40d9c542fb 3456122
evolution_2.28.2-2_amd64.deb
2240bdac10848abe71b19641f85c9512f4db1970974681b022397625170f5e87 338650
evolution-dev_2.28.2-2_amd64.deb
4980c73cf7ce401f3cf927888076d35187d94d895862d135d913d86daa7f8303 7976664
evolution-dbg_2.28.2-2_amd64.deb
5bb569646fe4d665a74b93cb6261adc27e406f3ec5412e72dc7f5ab7e9b47400 218350
evolution-plugins_2.28.2-2_amd64.deb
5e1baa9c7c515ce851a5316a3c9bec540f7e8482424ca1001c9b5c919f8a3a7c 187890
evolution-plugins-experimental_2.28.2-2_amd64.deb
Files:
3c78dbbf6c725f6b89a8d69ebd72fa6e 3684 gnome optional evolution_2.28.2-2.dsc
73ad755b46a924a91707914814157b3d 35311 gnome optional
evolution_2.28.2-2.diff.gz
ce83ec24d9159024a334a8cd2b904651 26464164 gnome optional
evolution-common_2.28.2-2_all.deb
9442abfa71d7508d268164e1fd36337d 3456122 gnome optional
evolution_2.28.2-2_amd64.deb
432c8d89c76d4ecbb3c72dc666b9701a 338650 devel optional
evolution-dev_2.28.2-2_amd64.deb
1b134e450ca628e3de9c86d2d1b9b735 7976664 debug extra
evolution-dbg_2.28.2-2_amd64.deb
abb6cfd04b1a351ad70d0362a1929b72 218350 gnome optional
evolution-plugins_2.28.2-2_amd64.deb
3aac9dadd62bcdde44cd2fa07f7d0b54 187890 gnome optional
evolution-plugins-experimental_2.28.2-2_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)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=pUZX
-----END PGP SIGNATURE-----
--- End Message ---
