On 2012-05-29 20:49, Graeme Fowler wrote:
> On Tue, 2012-05-29 at 20:16 +0700, Janne Snabb wrote:
>> I am seeing some GnuTLS 3.0.x issues which I am unable to reproduce when
>> using GnuTLS 2.x. This could be a GnuTLS bug.
>>
>> On Exim 4.80 RC4 server with GnuTLS 3.0.19 as supplied by Ubuntu 12.04:
>>
>> tls_verify_vertificates = /etc/ssl/certs/ca-certificates.crt
>
> Is there, perchance, a certificate with an MD5 signature in that bundle?
Yes there was, 10 of them. I should have tried this based on the Exim
notes about MD5 certs. Unfortunately removing them did not help.
I will ask on the GnuTLS list.
--
Janne Snabb / EPIPE Communications
snabb@??? -
http://epipe.com/