Bug#403072: [Pkg-gnutls-maint] Re: Bug#403072: exim4-daemon-light fails to use equifax SSL cert/key obtained from "1&1" hosting

Felix Palmen fmp at palmen.homeip.net
Fri Dec 15 23:06:19 CET 2006


* James Westby <jw+debian at jameswestby.net> [20061215 18:24]:
> However I think there is still a bug. GnuTLS can create PKCS#8 keys
> (certtool -p -8), so I think it should be able to read them. I just
> generated one with the above command, and then certtool -k failed with a
> base64 decoding error.

At least, the source of the problem is not obvious to the user at all.

> So this bug should be to add support for reading PKCS#8 keys, or at the
> very least give a sensible error message.

Agreed. After all, there is pkcs8-decoding code in the library, so
it should not be to hard to make it recognize a key starting with
-----BEGIN PRIVATE KEY----- and try pkcs8 on it.

> Have you got your certificate up and running with the converted one now?

Yes, thank you, for me this problem is solved now :) (i'm back to the
official debian exim4 packages)

Regards,
Felix

-- 
 | /"\   ASCII Ribbon   | Felix M. Palmen (Zirias)    http://zirias.ath.cx/ |
 | \ / Campaign Against | fmp at palmen.homeip.net      encrypted mail welcome |
 |  X    HTML In Mail   | PGP key: http://zirias.ath.cx/pub.txt             |
 | / \     And News     | ED9B 62D0 BE39 32F9 2488 5D0C 8177 9D80 5ECF F683 |




More information about the Pkg-gnutls-maint mailing list