Package: iceweasel
Version: 2.0+dfsg-1
Severity: normal

Iceweasel fails to load https://www.ultimatix.net saying:

"Could not establish encrypted connection because certificate presented by
www.ultimatix.net is either invalid or corrupted. Error Code: -8102".

The above site opens fine in Konqueror as well as in Internet Explorer.

Here's a snippet of the certificate to confirm that the certificate
supports web server
authentication:

X509v3 Key Usage:
   Digital Signature, Non Repudiation
X509v3 Extended Key Usage:
   E-mail Protection, TLS Web Server Authentication, Microsoft Server
Gated Crypto,
   Netscape Server Gated Crypto
Netscape Cert Type:
   SSL Client, SSL Server


The only difference between this certificate and another valid
certificate is that the
"Extended Key Usage" section comes before the "Key Usage" section in
the valid certificate.
Does konqueror validate this certificate erroneously or should firefox
be accepting this
certificate as well?


Regards,
Siddhesh


-- System Information:
Debian Release: 4.0
 APT prefers unstable
 APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/dash
Kernel: Linux 2.6.18-2-486
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages iceweasel depends on:
ii  debianutils               2.17.3         Miscellaneous utilities specific t
ii  fontconfig                2.4.1-2        generic font configuration library
ii  libatk1.0-0               1.12.3-1       The ATK accessibility toolkit
ii  libc6                     2.3.6.ds1-8    GNU C Library: Shared libraries
ii  libcairo2                 1.2.4-4        The Cairo 2D vector graphics libra
ii  libfontconfig1            2.4.1-2        generic font configuration library
ii  libfreetype6              2.2.1-5        FreeType 2 font engine, shared lib
ii  libgcc1                   1:4.1.1-20     GCC support library
ii  libglib2.0-0              2.12.4-2       The GLib library of C routines
ii  libgtk2.0-0               2.8.20-3       The GTK+ graphical user interface
ii  libjpeg62                 6b-13          The Independent JPEG Group's JPEG
ii  libmyspell3c2             1:3.1-17       MySpell spellchecking library
ii  libpango1.0-0             1.14.8-2       Layout and rendering of internatio
ii  libpng12-0                1.2.13-4       PNG library - runtime
ii  libstdc++6                4.1.1-20       The GNU Standard C++ Library v3
ii  libx11-6                  2:1.0.3-4      X11 client-side library
ii  libxft2                   2.1.8.2-8      FreeType-based font drawing librar
ii  libxinerama1              1:1.0.1-4.1    X11 Xinerama extension library
ii  libxp6                    1:1.0.0.xsf1-1 X Printing Extension (Xprint) clie
ii  libxrender1               1:0.9.1-3      X Rendering Extension client libra
ii  libxt6                    1:1.0.2-2      X11 toolkit intrinsics library
ii  psmisc                    22.3-1         Utilities that use the proc filesy
ii  zlib1g                    1:1.2.3-13     compression library - runtime

iceweasel recommends no packages.

-- no debconf information


--
Siddhesh Poyarekar
http://siddhesh.tk
http://siddhesh.phpnet.us


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to