[gnutls-devel] gnutls 3.5.11

[Andreas Radke]

Am Sat, 8 Apr 2017 14:39:56 +0200
schrieb Andreas Metzler <ametzler at bebt.de>:

> On 2017-04-08 Andreas Radke <andreas.radke at mailbox.org> wrote:
> > With this new release the test suite fails here:  
> 
> > FAIL: trust-store
> > =================  
> 
> > doit:64: no certificates were found in system trust store!
> > FAIL trust-store (exit status: 1)  
> 
> > Any idea what has changed?  
> 
> Hello,
> 
> This happens if gnutls is built with e.g. 
> --with-default-trust-store-file=/etc/ssl/certs/ca-certificates.crt
> and /etc/ssl/certs/ca-certificates.crt is empty/non-existing when
> running the testsuite.
> 
> cu Andreas

lrwxrwxrwx 1 root root 49 Mar  7
22:05 /etc/ssl/certs/ca-certificates.crt
-> ../../ca-certificates/extracted/tls-ca-bundle.pem # ACCVRAIZ1
-----BEGIN CERTIFICATE-----
MIIH0zCCBbugAwIBAgIIXsO3pkN/pOAwDQYJKoZIhvcNAQEFBQAwQjESMBAGA1UE
AwwJQUNDVlJBSVoxMRAwDgYDVQQLDAdQS0lBQ0NWMQ0wCwYDVQQKDARBQ0NWMQsw
CQYDVQQGEwJFUzAeFw0xMTA1MDUwOTM3MzdaFw0zMDEyMzEwOTM3MzdaMEIxEjAQ


May this happen because we use a symlink? The file is not empty. We
build using
--with-default-trust-store-pkcs11="pkcs11:model=p11-kit-trust;manufacturer=PKCS%2311%20Kit"

The test was introduced with this commit:
https://gitlab.com/gnutls/gnutls/commit/8d740ae87fae9c1237421dd24825b78103c5da36

-Andy
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 488 bytes
Desc: Digitale Signatur von OpenPGP
URL: </pipermail/attachments/20170410/74c77985/attachment.sig>