Bug#507633: libgnutls26: GnuTLS does not know VeriSign any more
ametzler at downhill.at.eu.org
Wed Dec 3 19:19:56 CET 2008
On 2008-12-03 Michael Kiefer <Michael-Kiefer at web.de> wrote:
> Package: libgnutls26
> Version: 2.4.2-3
> Severity: important
> Since I updated libgnutls26 from 2.4.2-1 to 2.4.2-3 kMyMoney2 does
> not connect to my bank any more. When I run gnutls-cli --insecure
> -p 443 hbci-pintan-rp.s-hbci.de -d 4711 --print-cert it says
> - Peer's certificate issuer is unknown
> - Peer's certificate is NOT trusted
FWIW adding or dropping
gnutls-cli -p 443 hbci-pintan-rp.s-hbci.de --x509cafile \
succeed or not succeed in verifying the server certificate.
openssl s_client -connect hbci-pintan-rp.s-hbci.de:443 -CApath \
also reports "Verify return code: 0 (ok)"
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'
More information about the Gnutls-devel