On Tue, Jun 12, 2018 at 09:57:56PM +0200, Axel Beckert wrote: > Hi, > > Thijs Kinkhorst wrote: > > >> I've read about this bug (and the other one) on d-devel. I uploaded > > >> recently a new version of openssl to unstable (1.1.0h-3)which changes > > >> the exit code of "openssl rehash" to zero in case of a duplicate or if a > > >> certificate can no be open. > > >> I left this bug open in case the maintainer of this package wants to > > >> investigate why there are duplicates or non-existing certificates. > > > > > > Thanks for the update, Sebastian. > > > > > > OpenSSL commit for my own reference and for others, if interested: > > > https://github.com/openssl/openssl/commit/e6a833cb97ed762408b57ea3efa83bd10c1d2a78 > > > > Given that this openssl update is now in testing, should we close or at > > least downgrade this bug so ca-certificates can migrate? > > I just unhold ca-certificates 20170717 and upgraded it to 20180409 on > one of my affected machines (the i386 one) and unfortunately, the > issue (at least mine, which is #895482 with exit status 4, so only > Cc'ing that bug report) doesn't seem to fixed:
Which openssl version do you have installed? (Should some Breaks be added, Depends made stricter?) Kurt