canonical-partner-dev team mailing list archive

[Roger James <883839@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Ubuntu Release 11.10
Package acroread 9.4.2.0-0oneiric3 (from canonical partners archive)

The real acroread binary (rather than the script in /usr/bin/acroread)
searches for certificates using the the old subject name hash algorithm
from a version of OpenSSL before 1.0.0. The "acroread
-installCertificate" command is handled by the /usr/bin/acroread script
itself this generates the certificate file name in the certificate store
by running the command "openssl x509 -hash" which is a synonym for
"openssl x509 -subject_hash". This generates the hash using the new
openssl 1.0.0 onwards algorithm. This means that acroread can never find
the installed certificate.

A work round for this is to run the command  "openssl x509
-subject_hash_old -noout -in certfile" where certfile is the name of the
installed certificate e.g. ~/.adobe/Acrobat/9.0/Cert/12345678.0 and the
create a symbolic link to the certfile in the form of oldformathash.0

For example here is a list of my current cert store.

-rw------- 1 roger roger 1521 2011-10-28 21:35 157753a5.0
lrwxrwxrwx 1 roger roger   10 2011-10-29 13:28 2552cb33.0 -> 5dbc9ed7.0
lrwxrwxrwx 1 roger roger   10 2011-10-29 13:26 3c58f906.0 -> 157753a5.0
-rw------- 1 roger roger 1834 2011-10-28 21:35 5dbc9ed7.0
lrwxrwxrwx 1 roger roger   10 2011-10-29 13:30 75f3577c.0 -> ba1212fb.0
-rw------- 1 roger roger 1529 2011-10-28 21:36 b13cc6df.0
-rw------- 1 roger roger 1838 2011-10-28 21:49 ba1212fb.0
lrwxrwxrwx 1 roger roger   49 2011-10-29 19:40 curl-ca-bundle.crt -> /opt/Adobe/Reader9/Reader/Cert/curl-ca-bundle.crt
lrwxrwxrwx 1 roger roger   10 2011-10-29 13:29 ff783690.0 -> b13cc6df.0

I hope this is of use.

Roger

** Affects: acroread (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: acroread certificate x509

-- 
You received this bug notification because you are a member of Canonical
Partner Developers, which is subscribed to acroread in Ubuntu.
https://bugs.launchpad.net/bugs/883839

Title:
  Wrong file names generated by acroread -installCertificate

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/acroread/+bug/883839/+subscriptions