[Bug 1297986] Re: lynx https requests reports self-signed ssl certificate in error

[Marc Deslauriers]

The server does appear to send a cert in the chain to bridge the two
different "Entrust.net Certification Authority (2048)" certs, but I'm
guessing gnutls doesn't like it because it's out of order or something.

** Package changed: ca-certificates (Ubuntu) => gnutls26 (Ubuntu)

** Bug watch added: Debian Bug tracker #573736
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573736

** Also affects: gnutls26 (Debian) via
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573736
   Importance: Unknown
       Status: Unknown

** Changed in: gnutls26 (Ubuntu)
       Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to gnutls26 in Ubuntu.
https://bugs.launchpad.net/bugs/1297986

Title:
  lynx https requests reports self-signed ssl certificate in error

Status in “gnutls26” package in Ubuntu:
  Confirmed
Status in “gnutls26” package in Debian:
  Unknown

Bug description:
  After the update in Precise to ca-certificates
  20130906ubuntu0.12.04.1, lynx now falsely identifies the  SSL
  certificates as self-signed.

  I have verified this by attempting the following before and after a
  downgrade to ca-certificates=20111211

  lynx https://www.cmw.osfc.state.oh.us
  lynx https://prodapp.osfc.state.oh.us

  
  On both sites, the current ca-certificates 20130906ubuntu0.12.04.1 fails to identify a valid certificate and instead reports as unsigned.  After apt-get install ca-certificates=20111211 (a DOWNGRADE) the Precise system returned to proper working order.

  
  Description:	Ubuntu 12.04.4 LTS
  Release:	12.04

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/1297986/+subscriptions