Bug#532584: libshibsp1: Backchannel fails to contact AA

[Russ Allbery]

Francesco Malvezzi <francesco.malvezzi at unimore.it> writes:
> Russ Allbery ha scritto:

>> Ah, yes.  If that's the case, then cleaning up the certificates in
>> /etc/ssl/certs to remove the duplicate should resolve the problem.

>> http://marc.info/?l=openssl-users&m=123729123505080&w=2 seems to be the
>> relevant solution.

> After clearing all certificates from /etc/ssl/certs it works.

> So it was me the dummy one to put the same certificate twice in
> /etc/ssl/certs

> Thank you so much, to whom should I send a gift certificate?

Actually, I suspect it wasn't your fault at all.  From that thread, it
sounds like it was a problem with the ca-certificates package in Debian.

Specifically, I think this is:

    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=498658

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>