-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I think I stumbled on something related to this issue. I was having
the same problem described here. Running a strace on the wget process
showed an almost endless series of certificate examinations. Whatever
it is doing seemed to take longer than a timeout in the http
connection which resulted in a retry, which in turn restarted the
connection and the certificate examinations again. If I left the wget
process running for a few minutes, it usually ended in a segfault when
libc tried to get the length of a null string.

What I stumbled on was if I purged the ca-certificates package and
immediately reinstalled it, the wget completed normally.

dpkg --force-all purge ca-certificates

apt-get install ca-certificates

strace wget -d --no-check-certificate -O cyrus-sasl-2.1.22.zip \
https://developer.pidgin.im/static/win32/cyrus-sasl-2.1.22.zip

However, if I ran c_rehash as I typically do to create the symbolic
links to files by hash values, the problem returned.

When I looked into it, the c_rehash function seemed to point almost
all symbolic hash value links to ca-certificates.crt while the default
installation pointed the links to the individual pem files.

I don't know if this bug should be moved to openssl or not. Can
someone more familiar with the bug process verify this and weigh in?

Tony
- -- 
Anthony L. Awtrey
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJQxeX8AAoJEC1MrsQmmCjYomgIAIvGLcgW8XWOHMn+XRnJQFRO
2vhR2olzZ7eG31ExhDMJL6Rpen1dEj60G5mjs7A74UcMBZWUWQxhjqZ9k5J7pHbq
QWVhL5ecjkfy4g+b78v+OhOfAxjaAyN9eL/1R0HlRIphPP+uYQKAJTaoPWg7RryS
z7GimWmMQiMMx74QR7wEtQq97pjm9b3anyf5msgDZulUv+vOGIDdRpTcjYthpb8i
r9F5JcMBOdcWlU4LFId2Od8QTRbntkb1aYsnfw/89mWZ/MCg4qiDyWntq95YaguN
tKkm1bw+G62ddsY8cDzN8ZzC0RLmdUDlT1O+klTRMe8fQTOY2eDP+0RKfsw2cqo=
=PfI4
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to