[gnutls-devel] GnuTLS | Handle expiration of AddTrust root certificate (urgent) (#1008)

[Development of GNU's TLS library]

Andreas Metzler commented on a discussion: https://gitlab.com/gnutls/gnutls/-/issues/1008#note_352841981

I have pulled 299bd4f113d0bd39fa1577a671a04ed7899eff3c cdf075e7f54cb77f046ef3e7c2147f159941faca and 9067bcbee8ff18badff1e829d22e63590dbd7a5c for Debian unstable's [3.6.13-4](https://packages.qa.debian.org/g/gnutls28/news/20200601T091851Z.html). 

I would appreciate a second pair of eyes to look over the backport for 3.6.7 (Debian 10/buster):
[44_rel3.6.14_15-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch](/uploads/a966c3fce079366355aad1f786b3d44b/44_rel3.6.14_15-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch)
[44_rel3.6.14_16-x509-trigger-fallback-verification-path-when-cert-is.patch](/uploads/cc43478b14fae8a1bc952600d6efd975/44_rel3.6.14_16-x509-trigger-fallback-verification-path-when-cert-is.patch)
[44_rel3.6.14_17-tests-add-test-case-for-certificate-chain-supersedin.patch](/uploads/e7735af1fffae6c84256df89bdf2573e/44_rel3.6.14_17-tests-add-test-case-for-certificate-chain-supersedin.patch)
(middle one listed for completeness sake, unchanged, applies cleanly).

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1008#note_352841981
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20200601/6f618fba/attachment.html>