[Eisfair] certs: Fehlermeldu?==?utf-8?Q?ngen bei Überprüfung der Z?==?utf-8?Q?ertifikatsketten

[Rene Hanke]

Hallo!

Ich habe gerade Ärger mit einem Zertifikat (kommt ja ab und an vor),
bei der Gelegenheit wollte ich nach ungebrauchten Zertifikaten suchen
lassen.

Dabei tauchen aber unerwartet Fehlermeldungen auf, die ich bei der
letzten Suche (lange her, definitiv andere certs-Version) nicht hatte:

Find unrequired certificates - action: show

getting list of certificates...
resolving certificate chains...
   wait [ ................................................... ]
   wait [ ............./var/install/bin/certs-show-chain: eval: line
534: syntax error near unexpected token `('
/var/install/bin/certs-show-chain: eval: line 534: `cert_1_subject="C =
US, O = "VeriSign, Inc.", OU = VeriSign Trust Network, OU = "(c) 2006
VeriSign, Inc. - For authorized use only", CN = VeriSign Class 3 Public
Primary Certification Authority - G5"'
.............../var/install/bin/certs-show-chain: eval: line 536:
syntax error near unexpected token `('
/var/install/bin/certs-show-chain: eval: line 536: `cert_2_issuer="C =
US, O = "VeriSign, Inc.", OU = VeriSign Trust Network, OU = "(c) 2006
VeriSign, Inc. - For authorized use only", CN = VeriSign Class 3 Public
Primary Certification Authority - G5"'
..................... ]
   wait [ ................................................... ]
   wait [ ................................................... ]
   wait [ ................./var/install/bin/certs-show-chain: line 536:
Inc., CN = thawte SSL CA - G2: command not found
......./var/install/bin/certs-show-chain: line 534: Inc., CN = thawte
SSL CA - G2: command not found
/var/install/bin/certs-show-chain: eval: line 536: syntax error near
unexpected token `('
/var/install/bin/certs-show-chain: eval: line 536: `cert_2_issuer="C =
US, O = "thawte, Inc.", OU = Certification Services Division, OU = "(c)
2006 thawte, Inc. - For authorized use only", CN = thawte Primary Root
CA"'
......................... ]
   wait [ ................/var/install/bin/certs-show-chain: eval: line
536: syntax error near unexpected token `('
/var/install/bin/certs-show-chain: eval: line 536: `cert_1_issuer="C =
US, O = "VeriSign, Inc.", OU = VeriSign Trust Network, OU = "(c) 2006
VeriSign, Inc. - For authorized use only", CN = VeriSign Class 3 Public
Primary Certification Authority - G5"'
................................/var/install/bin/certs-show-chain:
eval: line 534: syntax error near unexpected token `('
/var/install/bin/certs-show-chain: eval: line 534: `cert_1_subject="C =
US, O = "thawte, Inc.", OU = Certification Services Division, OU = "(c)
2006 thawte, Inc. - For authorized use only", CN = thawte Primary Root
CA"'
. ]
   wait [ ....../var/install/bin/certs-show-chain: line 534: Inc., CN =
thawte SSL CA - G2: command not found
/var/install/bin/certs-show-chain: eval: line 536: syntax error near
unexpected token `('
/var/install/bin/certs-show-chain: eval: line 536: `cert_1_issuer="C =
US, O = "thawte, Inc.", OU = Certification Services Division, OU = "(c)
2006 thawte, Inc. - For authorized use only", CN = thawte Primary Root
CA"'
 ]
identifying intermediate certificates...
analysing certificates...
   wait [ . ]
showing results...


Die Ergebnisse sind dann:

### Find unrequired certificates ###

#  E  - error in certificate chain!
#
#  C  - client certificate
#  I  - intermediate certificate
#  R  - root certificate
# (x) - number of occurencies

ERROR:E:PSCProcert.pem (1)
# ^^^ check the certficate chain first ^^^
DELETE:R:mini_httpd.pem (0)
KEEP:R:DST_Root_CA_X3.pem (1)
KEEP:C:LetsEncryptAuthorityX3.pem (1)
KEEP:C:TeleSec_ServerPass_DE-1.pem (1)
KEEP:R:ca.pem (1)
KEEP:R:deutsche_telekom_root_ca_2.pem (6)
KEEP:C:guetersloh.no-ip.org.pem (1)
KEEP:C:mail.gmx.net.pem (1)
KEEP:C:pop.gmx.net.pem (1)
KEEP:C:pop3.web.de.pem (1)
KEEP:C:smtp.web.de.pem (1)
KEEP:C:telesec_serverpass_de-2.pem (5)


Ebenso erhalte ich bei der Anzeige mancher Zertifikate Fehlermeldungen
dieser Art:

Show certificate details


/var/install/bin/certs-show-chain: eval: line 536: syntax error near
unexpected token `('
/var/install/bin/certs-show-chain: eval: line 536: `cert_2_issuer="C =
US, O = "VeriSign, Inc.", OU = VeriSign Trust Network, OU = "(c) 2006
VeriSign, Inc. - For authorized use only", CN = VeriSign Class 3 Public
Primary Certification Authority - G5"'
File '/usr/local/ssl/certs/alice.de.pem' has errors
Press ENTER to continue


Was läuft da falsch und an welcher Stellschraube muss ich drehen?


Lieber Gruß

René