Package: dgit Version: 0.23 Severity: important dgit needs to access various things from the ftpmaster server. These things are provided via HTTP over TLS.
Unfortunately dgit's HTTP TLS clients (wget and perl) can no longer be persuaded to expect specifically and exactly the right server's EE certificate. In the meantime I am going to make it use the CA set provided by ca-certificates. This is very wrong, though, because it means that anyone exploiting a failure of the CA cabal can cause dgit to see wrong answers. Ian. -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
