| Summary: | dev-libs/libressl: unable to verify alternate chains | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | Michelangelo Scopelliti <kernelpanic> |
| Component: | Current packages | Assignee: | Gentoo LibreSSL <libressl> |
| Status: | RESOLVED TEST-REQUEST | ||
| Severity: | normal | ||
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | https://github.com/libressl-portable/portable/issues/80 | ||
| See Also: | https://github.com/libressl-portable/portable/issues/80 | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
|
Description
Michelangelo Scopelliti
2016-10-14 07:49:21 UTC
If your system can't verify that certificate, then downloading adobe-flash is the least of your worries. (In reply to Jeroen Roovers from comment #1) > If your system can't verify that certificate, then downloading adobe-flash > is the least of your worries. Your comment is somehow... unexpected. Yes, 3 of my 5 systems which showed the issue have a problem, but it turns out is not limited to my systems. The other two weren't updated, and the problem showed up when upgrading from ca-certificates-20160104.3.27.1 to ca-certificates-20160104.3.23: ca-certificates-20160104.3.27.1 is not able to verify the issuer's authority, ca-certificates-20160104.3.23 is; downgrading fixes the issue, apparently. Maybe the bug has to be renamed, or re-filed, but I think that closing it could be hasty. What do you think? Had same problem, downgrading solved it. Trying with ca-certificates-20160104.3.27.1-r1 soon (In reply to jy6x2b32pie9 from comment #3) > Had same problem, downgrading solved it. Trying with > ca-certificates-20160104.3.27.1-r1 soon New package broke it, again. Also, I have similar errors when using `youtube-dl` and `go get` from https://go.googlesource.com/tools/ It's very weird. Could it be caused by the fact that I am located in Russia? (In reply to jy6x2b32pie9 from comment #4) > (In reply to jy6x2b32pie9 from comment #3) > > Had same problem, downgrading solved it. Trying with > > ca-certificates-20160104.3.27.1-r1 soon > > New package broke it, again. > Also, I have similar errors when using `youtube-dl` and `go get` from > https://go.googlesource.com/tools/ > It's very weird. Could it be caused by the fact that I am located in Russia? Should be noted, that I use libressl. Also, most likely related: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=213210 I will search more before commenting. https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=213226 and https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=213210 But most importantly, problem is known and described upstream in totality: https://github.com/libressl-portable/portable/issues/80 With my current setup: ca-certificates-20161102.3.27.2-r2 libressl-2.5.0 (and adobe-flash-24.0.0.170) the issue didn't show up anymore, at least for me doesn't look like a bug in ca-certificates Please re-test as this should no longer be an issue. (In reply to Aaron Bauman from comment #9) > Please re-test as this should no longer be an issue. Tested. It works. |
