canonical-partner-dev team mailing list archive

[dardhal <883839@xxxxxxxxxxxxxxxxxx>]

I can no longer test against the same URL and PDF I tried last year, as
I don't have any complaint to fill in the corresponding public service.
However, from a fresh install of acroread 9.5.4-1precise1, and after
clearing the contents of $HOME/.adobe/Acrobat/9.0/Cert/, I run the
following command as if Acrobad would have told me to do so while
sending data to the remote server:

$ acroread -installCertificate www.munimadrid.es 443

$ ls -lrt .adobe/Acrobat/9.0/Cert/
total 4
-rw------- 1 username username 1257 Mar  1 20:30 9a2389a5.0
lrwxrwxrwx 1 username username   49 Mar  1 20:39 curl-ca-bundle.crt -> /opt/Adobe/Reader9/Reader/Cert/curl-ca-bundle.crt


There seems to be a CDN (Content Delivery Network, Akamai, in the middle though):

$ openssl x509 -in .adobe/Acrobat/9.0/Cert/9a2389a5.0 -text -noout
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120034505 (0x72794c9)
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=GTE Corporation, OU=GTE CyberTrust Solutions, Inc., CN=GTE CyberTrust Global Root
        Validity
            Not Before: Aug 27 18:54:14 2012 GMT
            Not After : Aug 27 18:53:22 2013 GMT
        Subject: C=US, O=Akamai Technologies, Inc., CN=a248.e.akamai.net

The Acrobat helper script (/usr/bin/acroread) is still using the new-style OpenSSL hash to create the names of the certificate files on disk:
214     HASH=`openssl x509 -hash -noout -in $CERTNAME`

According to the first comment to the Bug, earlier versions of Acrobat were using the old-style hash, which for the certificate below would be:
$ openssl x509 -subject_hash_old -noout -in .adobe/Acrobat/9.0/Cert/9a2389a5.0
5deccbf8

As I can't try the original form anymore , and a search for "strings
acroread_binary" didn't reveal any clue about whether the binary may be
using old style or new style certificate file hash names, so I can't
immediately test myself.

Will try again in the coming days to see if I can come up with something
to test.

-- 
You received this bug notification because you are a member of Canonical
Partner Developers, which is subscribed to acroread in Ubuntu.
https://bugs.launchpad.net/bugs/883839

Title:
  Wrong file names generated by acroread -installCertificate

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/acroread/+bug/883839/+subscriptions