X2Go Bug report logs - #1530
TLS intermediate certificate seems to be "wrong"

Full log

🔗 View this message in rfc822 format

MIME-Version: 1.0
X-Mailer: MIME-tools 5.509 (Entity 5.509)
X-Loop: owner@bugs.x2go.org
From: owner@bugs.x2go.org (X2Go Bug Tracking System)
Subject: Bug#1530 closed by Mihai Moldovan <ionic@ionic.de> (Re: Bug#1530:
 TLS intermediate certificate seems to be "wrong")
Message-ID: <handler.1530.b1530.161522818719009.notifdone@bugs.x2go.org>
References: <3e466af7-f6e1-db7c-3132-e401aaea2a29@ionic.de>
X-X2go-PR-Message: they-closed 1530
X-X2go-PR-Package: wiki.x2go.org
Date: Mon, 08 Mar 2021 18:30:03 +0000
Content-Type: multipart/mixed; boundary="----------=_1615228203-19107-0"

[Message part 1 (text/plain, inline)]

This is an automatic notification regarding your Bug report
which was filed against the wiki.x2go.org package:

#1530: TLS intermediate certificate seems to be "wrong"

It has been closed by Mihai Moldovan <ionic@ionic.de>.

Their explanation is attached below along with your original report.
If this explanation is unsatisfactory and you have not received a
better one in a separate message then please contact Mihai Moldovan <ionic@ionic.de> by
replying to this email.


-- 
1530: bugs.x2go.org/cgi-bin/bugreport.cgi?bug=1530
X2Go Bug Tracking System
Contact owner@bugs.x2go.org with problems

[Message part 2 (message/rfc822, inline)]

From: Mihai Moldovan <ionic@ionic.de>

To: Tim Landscheidt <tim@tim-landscheidt.de>, 1530@bugs.x2go.org

Subject: Re: Bug#1530: TLS intermediate certificate seems to be "wrong"

Date: Mon, 8 Mar 2021 19:29:19 +0100

[Message part 3 (text/plain, inline)]

Control: close -1

* On 3/5/21 1:43 AM, Tim Landscheidt wrote:
> Staring at "openssl s_client -connect wiki.x2go.org:443",
> https://www.ssllabs.com/ssltest/analyze.html?d=wiki.x2go.org
> and https://letsencrypt.org/certificates/ suggests to a
> layman that the server certificate is signed by the R3
> certificate, but the X3 certificate is sent along?

Thanks for reporting and "debugging" this.

Yeah, we were concatenating the old X3 cross-signed cert.

Switched to R3 and regenerated the affected certificates. Should be fixed now.



Mihai

[OpenPGP_signature (application/pgp-signature, attachment)]

[Message part 5 (message/rfc822, inline)]

From: Tim Landscheidt <tim@tim-landscheidt.de>

To: submit@bugs.x2go.org

Subject: TLS intermediate certificate seems to be "wrong"

Date: Fri, 05 Mar 2021 00:43:36 +0000

Package: wiki.x2go.org

While checking URLs with LWP/curl, I noticed that
wiki.x2go.org fails:

| [tim@passepartout ~]$ curl https://wiki.x2go.org/
| curl: (60) SSL certificate problem: unable to get local issuer certificate
| More details here: https://curl.haxx.se/docs/sslcerts.html

| curl failed to verify the legitimacy of the server and therefore could not
| establish a secure connection to it. To learn more about this situation and
| how to fix it, please visit the web page mentioned above.
| [tim@passepartout ~]$

Staring at "openssl s_client -connect wiki.x2go.org:443",
https://www.ssllabs.com/ssltest/analyze.html?d=wiki.x2go.org
and https://letsencrypt.org/certificates/ suggests to a
layman that the server certificate is signed by the R3
certificate, but the X3 certificate is sent along?

Send a report that this bug log contains spam.