touch-packages team mailing list archive

[Kees Cook <kees@xxxxxxxxxx>]

Public bug reported:

$ gnutls-cli -p 587 smtp.outflux.net -s --print-cert
STARTTLS
ctrl-D
*** Starting TLS handshake
*** Fatal error: The signature algorithm is not supported.
*** Handshake has failed

This does not happen with 2.12.23-12ubuntu2.3.

$ echo QUIT | openssl s_client -connect smtp.outflux.net:587 -starttls smtp -showcerts 2>/dev/null | openssl x509 -noout -text
...
    Signature Algorithm: sha512WithRSAEncryption
...
            Public Key Algorithm: rsaEncryption
...

There's no MD5 visible.

** Affects: gnutls26 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to gnutls26 in Ubuntu.
https://bugs.launchpad.net/bugs/1532911

Title:
  [regression] 2.12.23-12ubuntu2.4 breaks sha512 certificates

Status in gnutls26 package in Ubuntu:
  New

Bug description:
  $ gnutls-cli -p 587 smtp.outflux.net -s --print-cert
  STARTTLS
  ctrl-D
  *** Starting TLS handshake
  *** Fatal error: The signature algorithm is not supported.
  *** Handshake has failed

  This does not happen with 2.12.23-12ubuntu2.3.

  $ echo QUIT | openssl s_client -connect smtp.outflux.net:587 -starttls smtp -showcerts 2>/dev/null | openssl x509 -noout -text
  ...
      Signature Algorithm: sha512WithRSAEncryption
  ...
              Public Key Algorithm: rsaEncryption
  ...

  There's no MD5 visible.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/1532911/+subscriptions