On 2018-04-22 16:55:21 [+0200], Axel Beckert wrote: > Hi Michael, Hi, > Michael Shuler wrote: > > Thanks for the details. #895473 reported a similar error on locally > > installed CA certificates, which I think may be related. > > That other bug report indeed looks similar albeit not identical. … > (That's why I've now downgraded ca-certificates on my two affected > machines.)
I've read about this bug (and the other one) on d-devel. I uploaded recently a new version of openssl to unstable (1.1.0h-3)which changes the exit code of "openssl rehash" to zero in case of a duplicate or if a certificate can no be open. I left this bug open in case the maintainer of this package wants to investigate why there are duplicates or non-existing certificates. > Regards, Axel Sebastian