<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/4.4.4">
</HEAD>
<BODY>
After installing the stable package and rerunning 'certtool -e --load-ca-certificate cacert.pem --infile servercert.pem', the outcome was:<BR>
<BR>
Certificate[0]: CN=testserver,O=Server.inc<BR>
Issued by: CN=testserver,O=Server.inc<BR>
certtool: the last certificate is not self signed<BR>
<BR>
<BR>
With the backports package the same command issued:<BR>
Loaded 1 certificates, 1 CAs and 0 CRLs<BR>
<BR>
Subject: CN=testserver,O=Server.inc<BR>
Issuer: CN=TestCA<BR>
Output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. <BR>
<BR>
Subject: CN=testserver,O=Server.inc<BR>
Issuer: CN=TestCA<BR>
Output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. <BR>
<BR>
Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. <BR>
<BR>
<BR>
It seems the self-sign for snakeoil CAs is broken.<BR>
Good luck, I don't think I'm of much use here, still playing around and trying to find out what I'm doing here <IMG SRC="cid:1403396774.3833.11.camel@Thunderbolt" ALIGN="middle" ALT=";)" BORDER="0"><BR>
<BR>
Jo
</BODY>
</HTML>