[gnutls-devel] turkish CA certificate

[Dmitriy Anisimkov]

I got this certificate from OpenSUSE repository
packageca-certificates-mozilla,
I guess it is trusted and public available.
OpenSSL shows it correctly

openssl x509 -in TURKTRUST_Certificate_Services_Provider_Root_1.pem.crt
-text -noout

But GNUTLS command

certtool --infile TURKTRUST_Certificate_Services_Provider_Root_1.pem -i

gives 2 errors

error: get_issuer_dn: ASN1 parser: Error in DER parsing.
error: get_dn: ASN1 parser: Error in DER parsing.

I tried it on OS provided gnutls and on compiled from git master last commit

commit 1eea0fbaa80d72fe35f9c9753e42eb4af7092325
Author: Nikos Mavrogiannopoulos <nmav at redhat.com>
Date:   Thu Jun 5 10:50:11 2014 +0200

-------------- next part --------------
A non-text attachment was scrubbed...
Name: TURKTRUST_Certificate_Services_Provider_Root_1.pem
Type: application/x-pem-file
Size: 1440 bytes
Desc: not available
URL: </pipermail/attachments/20140606/37a441ee/attachment.bin>