Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #1050004

Bug#983589: w3m: Cannot verify certificates any more

From Tatsuya Kinoshita <tats@debian.org>
Newsgroups linux.debian.bugs.dist
Subject Bug#983589: w3m: Cannot verify certificates any more
Date 2021-02-27 00:30 +0100
Message-ID <BMUIx-63j-3@gated-at.bofh.it> (permalink)
References <BMRUl-4lK-1@gated-at.bofh.it> <BMTWa-5x7-9@gated-at.bofh.it> <BMUfw-5DH-5@gated-at.bofh.it> <BMRUl-4lK-1@gated-at.bofh.it> <BMUfw-5DH-5@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

On 2021-02-26 at 23:54 +0100, Samuel Thibault wrote:
> ssl_ca_file
> ssl_ca_path /etc/ssl/certs, ~/.ssl/certs

Ah, multiple paths in ssl_ca_path is not supported.  The value
is directly passed to OpenSSL's SSL_CTX_load_verify_locations.
So, your configuration means the single nonexistence directory
"/etc/ssl/certs, ~/.ssl/certs" is used.

-2 implicitly adds OpenSSL default paths that helps you, but
I think this is a bug and fixed in -3.

Probably, you should set the following.

```
ssl_ca_file /etc/ssl/certs/ca-certificates.crt
ssl_ca_path ~/.ssl/certs
```

Thanks,
--
Tatsuya Kinoshita

Back to linux.debian.bugs.dist | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Bug#983589: w3m: Cannot verify certificates any more Samuel Thibault <sthibault@debian.org> - 2021-02-26 21:30 +0100
  Bug#983589: w3m: Cannot verify certificates any more Tatsuya Kinoshita <tats@debian.org> - 2021-02-26 23:40 +0100
    Bug#983589: w3m: Cannot verify certificates any more Samuel Thibault <sthibault@debian.org> - 2021-02-27 00:00 +0100
      Bug#983589: w3m: Cannot verify certificates any more Tatsuya Kinoshita <tats@debian.org> - 2021-02-27 00:30 +0100
        Bug#983589: w3m: Cannot verify certificates any more Tatsuya Kinoshita <tats@debian.org> - 2021-02-27 01:00 +0100

csiph-web