From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Date: Sat, 10 Feb 2007 15:17:13 +0300 From: "Konstantin A. Lepikhov" To: ALT Devel discussion list Message-ID: <20070210121713.GA17379@lks.home> Mail-Followup-To: ALT Devel discussion list References: <45CBA28F.9020804@altlinux.org> <20070208225219.GA25014@hell.immo.ru> <45CC2E6B.5030108@altlinux.org> <20070209092204.GJ3718@immo.ru> <45CD9220.8010900@altlinux.org> <20070210101113.GC28950@lks.home> <45CD9D35.3020703@altlinux.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="neYutvxvOLaeuPCA" Content-Disposition: inline In-Reply-To: <45CD9D35.3020703@altlinux.org> X-Operation-System: ALT Linux Sisyphus (20070101) 2.6.18-ovz-smp-alt8 User-Agent: Mutt/1.5.13 (2006-08-11) X-AV-Checked: ClamAV using ClamSMTP Subject: Re: [devel] I: TLS/SSL policy - broken packages X-BeenThere: devel@lists.altlinux.org X-Mailman-Version: 2.1.9rc1 Precedence: list Reply-To: ALT Devel discussion list List-Id: ALT Devel discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Feb 2007 12:15:43 -0000 Archived-At: List-Archive: List-Post: --neYutvxvOLaeuPCA Content-Type: multipart/mixed; boundary="x+6KMIRAuhnl3hBn" Content-Disposition: inline --x+6KMIRAuhnl3hBn Content-Type: text/plain; charset=koi8-r Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi Mikhail! Saturday 10, at 01:23:49 PM you wrote: =2E.. > =E9 =D7 =D4=CF=CD, =C9 =D7 =C4=D2=D5=C7=CF=CD =D3=CC=D5=DE=C1=C5 - =CE=C9= =CB=C1=CB. =FE=D4=CF =D1 =C4=C5=CC=C1=C0 =CE=C5 =D4=C1=CB? >=20 > =E4=CC=D1 =D0=CF=CC=CE=CF=C7=CF =D4=C5=CB=D3=D4=C1 =D0=C9=D3=D8=CD=C1: >=20 > $ openssl smime -verify -in message.signed > Error reading S/MIME message > 10965:error:2107A083:PKCS7 routines:SMIME_read_PKCS7:invalid mime > type:pk7_mime.c:364:type: multipart/mixed >=20 > =F4=CF =C5=D3=D4=D8 =C4=C1=D6=C5 =D0=D2=CF=DE=C9=D4=C1=D4=D8 =CE=C5 =CD= =CF=D6=C5=D4 =D7=CE=C5=DB=CE=C0=C0 MIME-=CF=C2=CF=CC=CF=DE=CB=D5. >=20 > =E5=D3=CC=C9 =CF=D4=D2=C5=DA=C1=D4=D8 multipart =C9 =CF=D3=D4=C1=D7=C9=D4= =D8 =D4=CF=CC=D8=CB=CF 2 =DE=C1=D3=D4=C9 - =D0=C9=D3=D8=CD=CF =C9 =D0=CF=C4= =D0=C9=D3=D8: >=20 > $ openssl smime -verify -in message2.signed > Verification failure > 10944:error:21075075:PKCS7 routines:PKCS7_verify:certificate verify > error:pk7_smime.c:233:Verify error:unable to get local issuer certificate >=20 > $ openssl smime -verify -CAfile /usr/share/ca-certificates/ca-bundle.crt > -in message2.signed > Verification failure > 10955:error:21075075:PKCS7 routines:PKCS7_verify:certificate verify > error:pk7_smime.c:233:Verify error:unable to get local issuer certificate >=20 > =E9 =D7 =D4=CF=CD, =C9 =D7 =C4=D2=D5=C7=CF=CD =D3=CC=D5=DE=C1=C5 - =D0=D2= =CF=D7=C5=D2=C9=D4=D8 =CE=C5 =D0=CF=CC=D5=DE=C1=C5=D4=D3=D1. =C1 =D7=CF=D4 =C9 =D0=C5=D2=D7=D9=CA =CB=C1=CE=C4=C9=C4=C1=D4 =CE=C1 =C4=CF= =C2=C1=D7=CC=C5=CE=C9=C5 =D7 ca-certificates :) =FC=D4=CF Thawte Freemail. =E5=D3=CC=C9 =D0=CF=CC=CF=D6=C9=D4=D8 =D0=D2=C9=CC=CF=D6=C5=CE=CE= =D9=CA =D3=C5=D2=D4=C9=C6=C9=CB=C1=D4 =D7 /var/lib/ssl/certs =C9 =D0=CF=D4=CF=CD =D3=CB=C1=DA=C1=D4=D8 =D4=C1=CD c_rehash, =D4=CF =D0=D2=CF= =D7=C5=D2=CB=C1 =D7=CF=DA=D7=D2=C1=DD=C1=C5=D4 =DE=D4=CF-=D4=CF =D0=CF=CC= =C5=C5 =D7=CD=C5=CE=D1=C5=CD=CF=C5 - =D4=C9=D0=C1 certificate expired. --=20 WBR et al. --x+6KMIRAuhnl3hBn Content-Type: text/plain; charset=us-ascii Content-Disposition: attachment; filename="thawte-freemail.pem" Content-Transfer-Encoding: quoted-printable Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha1WithRSAEncryption Issuer: C=3DZA, ST=3DWestern Cape, L=3DCape Town, O=3DThawte Consul= ting, OU=3DCertification Services Division, CN=3DThawte Personal Freemail C= A/emailAddress=3Dpersonal-freemail@thawte.com Validity Not Before: Jul 17 00:00:00 2003 GMT Not After : Jul 16 23:59:59 2013 GMT Subject: C=3DZA, O=3DThawte Consulting (Pty) Ltd., CN=3DThawte Pers= onal Freemail Issuing CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public Key: (1024 bit) Modulus (1024 bit): 00:c4:a6:3c:55:73:55:fb:4e:b9:ca:99:5a:1e:68: c0:75:04:70:9d:df:e9:ff:a3:1e:ec:bd:cd:f5:5b: f2:1a:76:bd:7f:0c:3a:61:f2:bf:51:ce:01:d4:e5: 50:0a:30:d7:02:63:5a:2c:89:15:70:8e:dd:c9:f0: 2b:85:5a:aa:3f:71:56:cb:af:3c:0b:07:e7:f1:1f: 91:36:24:2a:13:cf:2b:d5:f3:82:77:3d:03:be:2b: fe:bb:18:3e:07:bf:40:80:02:64:d7:a7:a6:bb:9f: 65:d1:c5:2a:54:85:0f:48:04:7f:a7:b6:d1:3c:61: 04:40:1e:64:19:72:60:b7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 CRL Distribution Points:=20 URI:http://crl.thawte.com/ThawtePersonalFreemailCA.crl X509v3 Key Usage:=20 Certificate Sign, CRL Sign X509v3 Subject Alternative Name:=20 DirName:/CN=3DPrivateLabel2-138 Signature Algorithm: sha1WithRSAEncryption 48:8c:d1:50:83:ea:0b:2e:cc:0d:a3:66:ac:67:0f:7f:af:ac: be:c2:17:a1:43:96:94:9d:7f:4c:21:b8:f8:36:1f:aa:2d:9f: 36:2f:c0:f4:1c:50:20:93:70:3c:fd:ad:e1:61:62:c3:d9:3a: 19:7e:84:b1:99:1b:00:c5:1a:0b:82:74:9e:25:50:94:62:c7: db:27:71:57:25:8d:dd:a9:9c:39:8e:8c:20:4f:65:5f:95:da: f7:f7:87:d6:c6:08:4e:ae:f6:ea:34:e5:10:1a:5b:35:4d:77: e3:56:21:78:82:dc:21:19:35:de:24:b1:d3:1d:46:ff:5d:5f: 65:4f -----BEGIN CERTIFICATE----- MIIDPzCCAqigAwIBAgIBDTANBgkqhkiG9w0BAQUFADCB0TELMAkGA1UEBhMCWkEx FTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3duMRowGAYD VQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBT ZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVt YWlsIENBMSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUu Y29tMB4XDTAzMDcxNzAwMDAwMFoXDTEzMDcxNjIzNTk1OVowYjELMAkGA1UEBhMC WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNV BAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMIGfMA0GCSqG SIb3DQEBAQUAA4GNADCBiQKBgQDEpjxVc1X7TrnKmVoeaMB1BHCd3+n/ox7svc31 W/Iadr1/DDph8r9RzgHU5VAKMNcCY1osiRVwjt3J8CuFWqo/cVbLrzwLB+fxH5E2 JCoTzyvV84J3PQO+K/67GD4Hv0CAAmTXp6a7n2XRxSpUhQ9IBH+nttE8YQRAHmQZ cmC3+wIDAQABo4GUMIGRMBIGA1UdEwEB/wQIMAYBAf8CAQAwQwYDVR0fBDwwOjA4 oDagNIYyaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVBlcnNvbmFsRnJlZW1h aWxDQS5jcmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQ cml2YXRlTGFiZWwyLTEzODANBgkqhkiG9w0BAQUFAAOBgQBIjNFQg+oLLswNo2as Zw9/r6y+whehQ5aUnX9MIbj4Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZfoSxmRsA xRoLgnSeJVCUYsfbJ3FXJY3dqZw5jowgT2Vfldr394fWxghOrvbqNOUQGls1TXfj ViF4gtwhGTXeJLHTHUb/XV9lTw=3D=3D -----END CERTIFICATE----- --x+6KMIRAuhnl3hBn-- --neYutvxvOLaeuPCA Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFFzbfJVtlNyKwhNDsRAiNDAKDI7l+AhKRjjwppJRYeJb87TfUYiQCffnx1 ePZPQ4EgE4DytC7lMl/fGqI= =io71 -----END PGP SIGNATURE----- --neYutvxvOLaeuPCA--