[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: GnuTLS CVE-2009-2730 Patches
|
From: |
Simon Josefsson |
|
Subject: |
Re: GnuTLS CVE-2009-2730 Patches |
|
Date: |
Thu, 20 Aug 2009 16:18:46 +0200 |
|
User-agent: |
Gnus/5.110011 (No Gnus v0.11) Emacs/23.1 (gnu/linux) |
Btw, I just notice a problem with RedHat's patch, it appears to break
OpenPGP connections:
gnutls-cli -p 5556 test.gnutls.org --priority NORMAL:+CTYPE-OPENPGP:-CTYPE-X509
I get an error:
- The hostname in the certificate does NOT match 'test.gnutls.org'
But this is incorrect, the names do match.
Please test if that command works on your versions, otherwise you will
need this patch too:
http://git.savannah.gnu.org/cgit/gnutls.git/commit/?id=9eed44b4ef9538117cc134956b32bc8fd39534fd
I'll write a self-test to check this regression too.
/Simon
- GnuTLS 2.8.2, Simon Josefsson, 2009/08/10
- Re: GnuTLS 2.8.2, Jeff Cai, 2009/08/12
- Re: GnuTLS 2.8.2, Jeff Cai, 2009/08/12
- Re: GnuTLS 2.8.2, Simon Josefsson, 2009/08/13
- Re: GnuTLS 2.8.2, Jeff Cai, 2009/08/14
- Re: GnuTLS 2.8.2, Simon Josefsson, 2009/08/14
- GnuTLS CVE-2009-2730 Patches (Was Re: GnuTLS 2.8.2), Jamie Strandboge, 2009/08/15
- Re: GnuTLS CVE-2009-2730 Patches, Simon Josefsson, 2009/08/15
- Re: GnuTLS CVE-2009-2730 Patches, Jamie Strandboge, 2009/08/17
- Re: GnuTLS CVE-2009-2730 Patches, Simon Josefsson, 2009/08/18
- Message not available
- Re: GnuTLS CVE-2009-2730 Patches,
Simon Josefsson <=
- Re: GnuTLS CVE-2009-2730 Patches, Simon Josefsson, 2009/08/20
- Re: GnuTLS CVE-2009-2730 Patches (Was Re: GnuTLS 2.8.2), Jamie Strandboge, 2009/08/17