[Bug 792456] New: lftp by default does not know certificate store

newer
[Bug 881902] New: serf 1.3.6 fixes...

bugzilla_noreply＠novell.com

3 Dec 2012 3 Dec '12

15:46

https://bugzilla.novell.com/show_bug.cgi?id=792456 https://bugzilla.novell.com/show_bug.cgi?id=792456#c0 Summary: lftp by default does not know certificate store Classification: openSUSE Product: openSUSE 12.2 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Network AssignedTo: puzel@suse.com ReportedBy: meissner@suse.com QAContact: qa-bugs@suse.de CC: lnussel@suse.com Found By: --- Blocker: --- lftp by default does not know its certificate store in 12.2. solutions: - build against openssl again - if buiolding with gnutls (like in 12.2) add "set ssl:ca-file /etc/ssl/ca-bundle.pem" ) Petr, what would you prefer? I would prefer openssl -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Show replies by date

bugzilla_noreply＠novell.com

4 Dec 4 Dec

10:43

New subject: [Bug 792456] lftp by default does not know certificate store

https://bugzilla.novell.com/show_bug.cgi?id=792456 https://bugzilla.novell.com/show_bug.cgi?id=792456#c2 --- Comment #2 from Ludwig Nussel 2012-12-04 11:43:17 CET --- In any case do not hardcode the CA bundle file in any config. Use gnutls_certificate_set_x509_system_trust() instead and let the library decide what the store is. http://www.gnu.org/software/gnutls/manual/gnutls.html#gnutls_005fcertificate... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

12:41

New subject: [Bug 792456] lftp by default does not know certificate store

https://bugzilla.novell.com/show_bug.cgi?id=792456 https://bugzilla.novell.com/show_bug.cgi?id=792456#c3 Petr Uzel changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|puzel@suse.com |vdziewiecki@suse.com --- Comment #3 from Petr Uzel 2012-12-04 12:41:33 UTC --- Vojta, could you please have a look? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

13:22

New subject: [Bug 792456] lftp by default does not know certificate store

https://bugzilla.novell.com/show_bug.cgi?id=792456 https://bugzilla.novell.com/show_bug.cgi?id=792456#c4 --- Comment #4 from Marcus Meissner 2012-12-04 13:22:36 UTC --- (using openssl uses the /etc/ssl/certs by default ... i would prefer this I think.) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

16:34

New subject: [Bug 792456] lftp by default does not know certificate store

https://bugzilla.novell.com/show_bug.cgi?id=792456 https://bugzilla.novell.com/show_bug.cgi?id=792456#c5 --- Comment #5 from Ludwig Nussel 2012-12-04 17:34:56 CET --- for openssl the same arguments apply. The function is called SSL_CTX_set_default_verify_paths() there. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

7 Dec 7 Dec

17:14

New subject: [Bug 792456] lftp by default does not know certificate store

https://bugzilla.novell.com/show_bug.cgi?id=792456 https://bugzilla.novell.com/show_bug.cgi?id=792456#c Wojtek Dziewięcki changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

15 Mar 15 Mar

07:40

New subject: [Bug 792456] lftp by default does not know certificate store

https://bugzilla.novell.com/show_bug.cgi?id=792456 https://bugzilla.novell.com/show_bug.cgi?id=792456#c6 Achim Gratz changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |Stromeko@NexGo.DE --- Comment #6 from Achim Gratz 2013-03-15 07:40:08 UTC --- (In reply to comment #0)

...

lftp by default does not know its certificate store in 12.2. add "set ssl:ca-file /etc/ssl/ca-bundle.pem"

Somehow this change seems to have landed in 12.3, but without the "set " at the beginning of the line, so that lftp complains about an invalid command on each start. Can this please be fixed (should I open a new bug for this)? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

18 Jun 18 Jun

08:45

New subject: [Bug 792456] lftp by default does not know certificate store

https://bugzilla.novell.com/show_bug.cgi?id=792456 https://bugzilla.novell.com/show_bug.cgi?id=792456#c7 Petr Gajdos changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED CC| |pgajdos@suse.com Resolution| |FIXED --- Comment #7 from Petr Gajdos 2014-06-18 08:45:07 UTC --- There is lftp-ca-bundle-path.patch from Dominique which appears to be there from 4.4.0 times. lftp is currently build against gnutls and the patch introduces 'set ssl:ca-file /etc/ssl/ca-bundle.pem'. Only 12.3 is missing 'set '. As far as I tested with lftp 4.5.2, it should work yet. Please reopen in case the problem persists. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

3602

Age (days ago)

4164

Last active (days ago)

List overview

Download

7 comments

1 participants

participants (1)

bugzilla_noreply＠novell.com

[Bug 792456] New: lftp by default does not know certificate store

tags

participants (1)