[Help-gnutls] gnutls fails to verify server sertificate while openssl works

[Peter Volkov]

Hello.

I found issue that while openssl works, gnutls-cli returns:

*** Verifying server certificate failed...

I've tried with gnutls 2.2.5 and 2.5.4.

Commands I've used to test and their outputs are in attachment.

I think this issue is rather important problem as it requires manual
intervention during the first build of Metasploit package in Gentoo:

Error validating server certificate for 'https://metasploit.com:443':
 - The certificate is not issued by a trusted authority. Use the
   fingerprint to validate the certificate manually!
Certificate information:
 - Hostname: metasploit.com
 - Valid: from Sun, 01 Apr 2007 22:02:24 GMT until Thu, 01 Apr 2010 22:02:24 GMT
 - Issuer: 07969287, http://certificates.godaddy.com/repository, GoDaddy.com, 
Inc., Scottsdale, Arizona, US
 - Fingerprint: 20:a7:2e:df:6d:53:10:6c:dc:2a:ca:33:fd:35:76:2c:0e:62:b1:4d
(R)eject, accept (t)emporarily or accept (p)ermanently?

Could you help me to find root issue? I have not attached ValiCert Class
2 certificate as I think it's installed on most systems. But if you need
that just ask me.

Thank you in advance.
-- 
Peter.

gnutls-cli.out
Description: Text document

openssl.out
Description: Text document