Bug#703932: apt-transport-https not sending a certificate to the server

2013-04-05 Thread Michael Vogt
On Tue, Apr 02, 2013 at 06:23:14PM +0200, Holger Hans Peter Freyther wrote: > On Tue, Apr 02, 2013 at 07:20:10AM +0200, Michael Vogt wrote: > > > > I wouldn't be suprised if that would solve your problem. But solving > > it with gnutls would be prefered. > > yes, it makes it work. I understand t

Bug#703932: apt-transport-https not sending a certificate to the server

2013-04-02 Thread Holger Hans Peter Freyther
On Tue, Apr 02, 2013 at 07:20:10AM +0200, Michael Vogt wrote: > > I wouldn't be suprised if that would solve your problem. But solving > it with gnutls would be prefered. yes, it makes it work. I understand that this is not usable solution for debian. So in terms of moving forward. I think a-t-h

Bug#703932: apt-transport-https not sending a certificate to the server

2013-04-01 Thread Michael Vogt
On Sun, Mar 31, 2013 at 02:36:46PM +0200, Holger Hans Peter Freyther wrote: > On Tue, Mar 26, 2013 at 02:35:56PM +0100, Michael Vogt wrote: > > Hi, Hi, thanks for the updated information! > > But that is of course not very helpful. You mentioned that the > > gnutls-cli commandline works for you

Bug#703932: apt-transport-https not sending a certificate to the server

2013-03-31 Thread Holger Hans Peter Freyther
On Tue, Mar 26, 2013 at 02:35:56PM +0100, Michael Vogt wrote: Hi, > But that is of course not very helpful. You mentioned that the > gnutls-cli commandline works for you? Could you please provide the > commandline you used? I tried with both curl and gnutls-cli: $ curl --cacert ./ca.crt --key

Bug#703932: apt-transport-https not sending a certificate to the server

2013-03-26 Thread Michael Vogt
On Tue, Mar 26, 2013 at 09:22:28AM +0100, Holger Hans Peter Freyther wrote: > On Tue, Mar 26, 2013 at 06:46:15AM +0100, Michael Vogt wrote: [..] > > Can you please run with Debug enabled? > > $ sudo apt-get update -o Debug::Acquire::https=1 > > I have the debug output already in a .conf.d file (as

Bug#703932: apt-transport-https not sending a certificate to the server

2013-03-26 Thread Holger Hans Peter Freyther
On Tue, Mar 26, 2013 at 06:46:15AM +0100, Michael Vogt wrote: Good Morning, I don't mind using gdb to step through the HttpsMethod::Fetch method but I just don't know what kind of Fetch statement to paste into the stdin of the transport. What would be the line to have the https transport attempt

Bug#703932: apt-transport-https not sending a certificate to the server

2013-03-26 Thread Holger Hans Peter Freyther
On Tue, Mar 26, 2013 at 06:24:56AM +0800, Daniel Hartwig wrote: Good Morning Daniel, > > gnutls_handshake() failed: Handshake failed > > Does root have read access all the way to the files in /home/ich/cert? I had checked this with strace (and renaming the files). Below is the relevant output

Bug#703932: apt-transport-https not sending a certificate to the server

2013-03-25 Thread Michael Vogt
On Mon, Mar 25, 2013 at 10:42:48PM +0100, Holger Freyther wrote: > Package: apt-transport-https > Version: 0.9.7.8 > Severity: important Thanks for your bugreport. > Dear Maintainer, > > I have configured apache to require client certificates, I have a CA, > a client key and client crt. I can u

Bug#703932: apt-transport-https not sending a certificate to the server

2013-03-25 Thread Daniel Hartwig
On 26 March 2013 05:42, Holger Freyther wrote: > $ cat /etc/apt/apt.conf.d/trust > Debug::Acquire::https "true"; > > Acquire::https::system { > Verify-Peer "true"; > Verify-Host "true"; > > CaInfo "/home/ich/cert/ca.crt"; > > SslCert "/home/ich/cert/client1.crt"; > SslKey "/ho

Bug#703932: apt-transport-https not sending a certificate to the server

2013-03-25 Thread Holger Freyther
Package: apt-transport-https Version: 0.9.7.8 Severity: important Dear Maintainer, I have configured apache to require client certificates, I have a CA, a client key and client crt. I can use both curl and gnutls-cli to connect to my server. I have configured apt to use these keys, in strace I se