PKCS#12 certs with embedded CA certs and GnuTLS

[Joe Orton]

On Thu, Oct 30, 2008 at 07:08:41PM +0000, Joe Orton wrote:
> This issue (Debian bug 480041) is almost certainly a neon bug.
> 
> I can reproduce the error with a PKCS#12 cert with an embedded CA cert; 
> if anybody else seeing this problem can confirm it's fixed with the 
> patch below, that would be great.

Since there are a variety of different symptoms reported in Debian bug 
480041, I'd like to clarify that the neon patch I've posted here should 
fix the case where SVN fails with the message:

  "SSL negotiation failed: SSL alert received: Decrypt error"

This is distinct from the case where GnuTLS fails to parse particular 
PKCS#12 files, which Dann has reported as:

  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503833

which had been independently reported upstream here:

http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3182

Regards, Joe