Comment 7 for bug 6761

Message-ID: <email address hidden>
Date: Fri, 10 Jan 2003 14:58:26 +0100
From: Christoph Martin <email address hidden>
To: <email address hidden>, <email address hidden>
Subject: [Fwd: Bug#176062: openssl: Expired certificates and recertification]

--------------enig7A778D497F6ADE3E5E907DFF
Content-Type: multipart/mixed; boundary="------------060806010900020503020102"

This is a multi-part message in MIME format.
--------------060806010900020503020102
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Forwarded from Debian Bug Tracking

Christoph

--------------060806010900020503020102
Content-Type: message/rfc822;
 name="Bug#176062: openssl: Expired certificates and recertification"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
 filename="Bug#176062: openssl: Expired certificates and
 recertification"

Received: via dmail-2000(11) for martin; Fri, 10 Jan 2003 00:41:58 +0100 (CET)
Return-Path: <email address hidden>
Received: from lucy.verwaltung.uni-mainz.de (lucy.Verwaltung.Uni-Mainz.DE
 [134.93.144.162])
 by wintermute.verwaltung.uni-mainz.de (8.12.3/8.12.3/Debian -4) with
 ESMTP id h09Nfg0C031706
 (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=FAIL)
 for <email address hidden>;
 Fri, 10 Jan 2003 00:41:42 +0100
Received: from mailgate2.zdv.Uni-Mainz.DE (mailgate2.zdv.Uni-Mainz.DE
 [134.93.8.57])
 by lucy.verwaltung.uni-mainz.de (8.12.3/8.12.3/Debian -4) with ESMTP id
 h09Nfgjb013023
 (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO)
 for <email address hidden>;
 Fri, 10 Jan 2003 00:41:42 +0100
Received: from exfront1.zdv.uni-mainz.de (exfront1.zdv.Uni-Mainz.DE
 [134.93.8.75])
 by mailgate2.zdv.Uni-Mainz.DE (8.12.6/8.12.6) with ESMTP id
 h09Nffn9003257 for <email address hidden>;
 Fri, 10 Jan 2003 00:41:41 +0100 (MET)
Received: from spamgate2.zdv.Uni-Mainz.DE ([134.93.8.232]) by
 exfront1.zdv.uni-mainz.de with Microsoft SMTPSVC(5.0.2195.5329);
 Fri, 10 Jan 2003 00:41:41 +0100
Received: from mailgate3.zdv.Uni-Mainz.DE (mailgate3.zdv.Uni-Mainz.DE
 [134.93.130.78])
 by spamgate2.zdv.Uni-Mainz.DE (8.12.6/8.12.2) with ESMTP id
 h09NfcIs029138 for <email address hidden>;
 Fri, 10 Jan 2003 00:41:38 +0100 (MET)
Received: from master.debian.org (master.debian.org [65.125.64.135])
 by mailgate3.zdv.Uni-Mainz.DE (8.12.6/8.12.6) with ESMTP id
 h09NfbwU026296 for <email address hidden>;
 Fri, 10 Jan 2003 00:41:37 +0100 (MET)
Received: from debbugs by master.debian.org with local (Exim 3.12 1 (Debian))
 id 18WmAk-0000K5-00; Thu, 09 Jan 2003 17:33:14 -0600
X-Loop: <email address hidden>
Subject: Bug#176062: openssl: Expired certificates and recertification
Reply-To: Florian Weimer <email address hidden>, <email address hidden>
Resent-From: Florian Weimer <email address hidden>
Resent-To: <email address hidden>
Resent-CC: Christoph Martin <email address hidden>,
 <email address hidden>
Resent-Date: Thu, 09 Jan 2003 23:33:13 GMT
Resent-Message-ID: <email address hidden>
X-Debian-PR-Message: report 176062
X-Debian-PR-Package: openssl
X-Debian-PR-Keywords: upstream
Received: via spool by <email address hidden> id=B.1042155062903
 (code B ref -1); Thu, 09 Jan 2003 23:33:13 GMT
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Florian Weimer <email address hidden>
To: Debian Bug Tracking System <email address hidden>
X-Mailer: reportbug 6762.10
Date: Fri, 10 Jan 2003 00:31:01 +0100
Message-Id: <email address hidden>
Delivered-To: <email address hidden>
X-Spam-Status: No, hits=-1.3 required=5 tests=DEBIAN_BTS_BUG, FORGED_RCVD_FOUND,
 RESENT_TO, SPAM_PHRASE_00_01, X_LOOP version=2.43
X-Spam-Status: No, hits=0.6 required=5.0 tests=SPAM_PHRASE_00_01 version=2.41
X-Spam-Level:
Resent-Sender: Debian BTS <email address hidden>
X-Virus-Scanned: by amavisd-milter (http://amavis.org/)
X-Virus-Scanned: by amavisd-milter (http://amavis.org/)
X-Spam-Report: CARRIAGE_RETURNS, DEBIAN_BTS_BUG, FORGED_RCVD_FOUND, RESENT_TO,
 SPAM_PHRASE_00_01, X_LOOP
X-OriginalArrivalTime: 09 Jan 2003 23:41:41.0602 (UTC)
 FILETIME=[A930C420:01C2B838]
X-Scanned-By: MIMEDefang 2.21 (www . roaringpenguin . com / mimedefang)

Package: openssl
Version: 0.9.6g-10
Severity: normal
Tags: upstream

"openssl ca" refuses to certifiy a DN which has already been certified,
even though the old certificate has expired. As a result,
recertification requires an additional, IMHO unnecessary step.

-- System Information:
Debian Release: 3.0
Architecture: i386
Kernel: Linux Login 2.4.18-xfs-1.1 #6 SMP Fri Jan 3 14:39:36 CET 2003 i686
Locale: LANG=C, LC_CTYPE=en_US

Versions of packages openssl depends on:
ii libc6 2.3.1-5 GNU C Library: Shared libraries an
ii libssl0.9.6 0.9.6g-10 SSL shared libraries
ii perl 5.8.0-14 Larry Wall's Practical Extraction

-- no debconf information

--------------060806010900020503020102--

--------------enig7A778D497F6ADE3E5E907DFF
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQE+HtGCgeVih7XOVJcRAqOLAKCVv/yfX2wOfkmmlGu/6mXmJCEuuwCcC+Iw
S5MzNafIy03yj1+7LW9ltn4=
=lkfh
-----END PGP SIGNATURE-----

--------------enig7A778D497F6ADE3E5E907DFF--