Home
Reading
Searching
Subscribe
Sponsors
Statistics
Posting
Contact
Spam
Lists
Links
About
Hosting
Filtering
Features Download
Marketing
Archives
FAQ
Blog
 
Gmane
From: Arnaud Ebalard <arno <at> natisbad.org>
Subject: Bug#485963: APT https method has no option for checking CRL
Newsgroups: gmane.linux.debian.apt.devel
Date: Thursday 12th June 2008 16:37:47 UTC (over 9 years ago)
Package: apt
Version: 0.7.14
Severity: wishlist

APT https method does not provide a way to verify revocation status of
server certificate. This is probably associated with the lack of support
in the underlying library (libcurl-gnutls) but Axel and I pushed patches
to curl maintainers that provide the feature.

I already sent a message with the patches that provide an option for
providing CRL directly to [email protected], but got not reply: 

http://permalink.gmane.org/gmane.linux.debian.apt.devel/14771

Note that the patches for libcurl are now in the CVS and will be in the
next stable version.

Cheers,

a+
 
CD: 2ms