Ubuntu
ipsec-tools package

Identifier verification fails with UTF-8-encoded RDN

Bug #1407274 reported by Kaarle Ritvanen
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
ipsec-tools (Ubuntu)
New
Undecided
Unassigned

Bug Description

Ubuntu Trusty seems to be affected by the scenario number 1 described in this post on OpenSSL's bug tracker:

http://rt.openssl.org/Ticket/Attachment/45105/25601/

To summarize, verifying the peer's identifer fails when the peer's DN contains a component of ASN.1 type UTF8String. As per RFC 3280, all new X.509 certificates must use such an encoding for DNs.

I have tested with the following version of racoon: 1:0.8.0-14ubuntu4

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.