Bug#514578: LDAP STARTTLS is broken

[Witold Baryluk]

On 02-13 16:01, Simon Josefsson wrote:
 > Can provide any logs if needed.
> 
> Please do (gnutls-cli --print-cert -d 4711 against your server).  A
> trusted root CA certificate signed with RSA-MD5 should not cause any
> problems.  Only intermediate non-trusted certificates signed with
> RSA-MD5 should be rejected.

Strange because in my configuration, certificate of LDAP server
is directly signed by my root CA certificate.

http://smp.if.uj.edu.pl/~baryluk/ldaptlsdebug.txt

Regards,
Witek


-- 
Witold Baryluk
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20090213/0ef0c51b/attachment.pgp