From unknown Sun Jun 22 07:51:47 2025 X-Loop: help-debbugs@gnu.org Subject: bug#13877: 24.3; gnutls.el: Enable Certificate Checks Resent-From: Moritz Ulrich Original-Sender: debbugs-submit-bounces@debbugs.gnu.org Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 05 Mar 2013 16:47:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 13877 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: 13877@debbugs.gnu.org X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.136250200419001 (code B ref -1); Tue, 05 Mar 2013 16:47:03 +0000 Received: (at submit) by debbugs.gnu.org; 5 Mar 2013 16:46:44 +0000 Received: from localhost ([127.0.0.1]:60879 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1UCv0i-0004wM-Qk for submit@debbugs.gnu.org; Tue, 05 Mar 2013 11:46:44 -0500 Received: from eggs.gnu.org ([208.118.235.92]:36985) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1UCpIY-0002qo-LG for submit@debbugs.gnu.org; Tue, 05 Mar 2013 05:40:44 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1UCpI9-0004HM-4J for submit@debbugs.gnu.org; Tue, 05 Mar 2013 05:40:18 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-102.6 required=5.0 tests=BAYES_00, RCVD_IN_DNSWL_LOW, USER_IN_WHITELIST autolearn=unavailable version=3.3.2 Received: from lists.gnu.org ([208.118.235.17]:36592) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UCpI9-0004HI-22 for submit@debbugs.gnu.org; Tue, 05 Mar 2013 05:40:17 -0500 Received: from eggs.gnu.org ([208.118.235.92]:48343) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UCpI7-0004TX-Vn for bug-gnu-emacs@gnu.org; Tue, 05 Mar 2013 05:40:16 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1UCpI6-0004G7-Ot for bug-gnu-emacs@gnu.org; Tue, 05 Mar 2013 05:40:15 -0500 Received: from mail-wg0-f53.google.com ([74.125.82.53]:56983) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UCpI6-0004Fy-JB for bug-gnu-emacs@gnu.org; Tue, 05 Mar 2013 05:40:14 -0500 Received: by mail-wg0-f53.google.com with SMTP id fn15so5593391wgb.32 for ; Tue, 05 Mar 2013 02:40:13 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:from:to:subject:user-agent:date:message-id:mime-version :content-type:x-gm-message-state; bh=DiJ1UCA48Hrn92o/iLmDmhOVfhL3lisoZYc6EnL5zMs=; b=o4JQ0KbU8kuCYyo5u5y5rUKsThXnibO1xgfHIwPdFr8Lomg8kjyqweNkFLQ65I0uLA kAUmpumYeXBk11lPt4B3OgQWpTWf3AkDB9Vy7vERvUyez9Wyfy7/7CXIJZm4RRZ4YZna LuJnZlG+zrpyOOsXUmvtBZEkP4ecvDoU8dCAxhv1xadLUV5maoqMzE9yzUi7bfviA3LW FGp6euy0ml19MC+m7b3Q7UyF5ORAXmhJXfQTZhK3NdXssZxqbB+IzOXb4l4KJ6kAG8lT lkD3VuyD9XKN/0DLpCUYFAe/T4K5I5ko2GwojNR+TajHf4gh8SV60ZOGdXWE22vCGGus P3Yg== X-Received: by 10.205.139.71 with SMTP id iv7mr9015948bkc.86.1362480013118; Tue, 05 Mar 2013 02:40:13 -0800 (PST) Received: from Moritzs-MacBook-Air (pd956ba09.dip0.t-ipconnect.de. [217.86.186.9]) by mx.google.com with ESMTPS id g28sm6859705bkv.17.2013.03.05.02.40.11 (version=TLSv1.2 cipher=RC4-SHA bits=128/128); Tue, 05 Mar 2013 02:40:12 -0800 (PST) From: Moritz Ulrich User-agent: mu4e 0.9.9; emacs 24.3.1 Date: Tue, 05 Mar 2013 11:40:09 +0100 Message-ID: MIME-Version: 1.0 Content-Type: text/plain X-Gm-Message-State: ALoCoQk3ERlHHjAG5jBCw7JGFwwZUoy4ebdMvYcw7lppbXSn/ECGAnjXFRawAkcELOCBpGiSGE5Y X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x [fuzzy] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 208.118.235.17 X-Spam-Score: -5.0 (-----) X-Mailman-Approved-At: Tue, 05 Mar 2013 11:46:39 -0500 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -6.9 (------) Currently, gnutls.el doesn't check certificate signatures when used via `open-network-stream' with :type 'tls or `open-gnutls-stream'. This is caused by the following code from `open-gnutls-stream' (gnutls.el:110): --8<---------------cut here---------------start------------->8--- (gnutls-negotiate :process (open-network-stream name buffer host service) :type 'gnutls-x509pki :hostname host) --8<---------------cut here---------------end--------------->8--- There is NO way to set :verify-host, :verify-flags, etc. for this call to `gnutls-negotiate' when using gnutls via high-level functions like `open-network-stream'. I consider this a bug, as Emacs won't check any certificates and therefore allow man in the middle attacks without even documenting this. It should at least be possible to pass :verify-* from `open-network-stream' down to `gnutls-negotiate'. That would be a simple yet effective solution. In GNU Emacs 24.3.1 (x86_64-apple-darwin11.4.2, NS apple-appkit-1138.51) of 2013-03-05 on Moritzs-MacBook-Air Windowing system distributor `Apple', version 10.3.1138 Configured using: `configure '--prefix=/usr/local/Cellar/emacs/24.3-rc1' '--without-dbus' '--enable-locallisppath=/usr/local/share/emacs/site-lisp' '--infodir=/usr/local/Cellar/emacs/24.3-rc1/share/info/emacs' '--with-ns' '--disable-ns-self-contained' '--with-gnutls' '--with-jpeg' '--with-xml2' '--with-imagemagick' 'CC=cc'' <#secure method=pgpmime mode=sign> -- Moritz Ulrich From unknown Sun Jun 22 07:51:47 2025 X-Loop: help-debbugs@gnu.org Subject: bug#13877: 24.3; gnutls.el: Enable Certificate Checks Resent-From: Glenn Morris Original-Sender: debbugs-submit-bounces@debbugs.gnu.org Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 05 Mar 2013 16:52:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 13877 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Moritz Ulrich Cc: 13877@debbugs.gnu.org Received: via spool by 13877-submit@debbugs.gnu.org id=B13877.136250231919573 (code B ref 13877); Tue, 05 Mar 2013 16:52:02 +0000 Received: (at 13877) by debbugs.gnu.org; 5 Mar 2013 16:51:59 +0000 Received: from localhost ([127.0.0.1]:60896 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1UCv5p-00055c-TH for submit@debbugs.gnu.org; Tue, 05 Mar 2013 11:51:59 -0500 Received: from fencepost.gnu.org ([208.118.235.10]:46244 ident=Debian-exim) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1UCv5m-00055U-Vd for 13877@debbugs.gnu.org; Tue, 05 Mar 2013 11:51:55 -0500 Received: from rgm by fencepost.gnu.org with local (Exim 4.71) (envelope-from ) id 1UCv5R-00023F-Cc; Tue, 05 Mar 2013 11:51:33 -0500 From: Glenn Morris References: X-Spook: Ft. Meade underground Jyllandsposten target X-Ran: |rW7eTWw9~NDrlfBC6SxhAjfv2;0axO,Qlm?5wx%F7loDv&eD[:jZOBEkJ#)%:#`RZ8<)G X-Hue: magenta X-Attribution: GM Date: Tue, 05 Mar 2013 11:51:33 -0500 In-Reply-To: (Moritz Ulrich's message of "Tue, 05 Mar 2013 11:40:09 +0100") Message-ID: <0evc953i3u.fsf@fencepost.gnu.org> User-Agent: Gnus (www.gnus.org), GNU Emacs (www.gnu.org/software/emacs/) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: -4.8 (----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -7.5 (-------) Moritz Ulrich wrote: > Currently, gnutls.el doesn't check certificate signatures when used via > `open-network-stream' with :type 'tls or `open-gnutls-stream'. Please see http://debbugs.gnu.org/13374 It was considered too complicated to fix this properly for 24.3. > There is NO way to set :verify-host, :verify-flags, etc. for this call > to `gnutls-negotiate' when using gnutls via high-level functions like > `open-network-stream'. > > I consider this a bug, as Emacs won't check any certificates and > therefore allow man in the middle attacks without even documenting this. > > It should at least be possible to pass :verify-* from > `open-network-stream' down to `gnutls-negotiate'. That would be a simple > yet effective solution. From debbugs-submit-bounces@debbugs.gnu.org Tue Mar 05 11:52:28 2013 Received: (at control) by debbugs.gnu.org; 5 Mar 2013 16:52:28 +0000 Received: from localhost ([127.0.0.1]:60900 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1UCv6H-00056e-Ut for submit@debbugs.gnu.org; Tue, 05 Mar 2013 11:52:27 -0500 Received: from fencepost.gnu.org ([208.118.235.10]:46302 ident=Debian-exim) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1UCv6G-00056V-5z for control@debbugs.gnu.org; Tue, 05 Mar 2013 11:52:24 -0500 Received: from rgm by fencepost.gnu.org with local (Exim 4.71) (envelope-from ) id 1UCv5u-00027S-N9 for control@debbugs.gnu.org; Tue, 05 Mar 2013 11:52:02 -0500 Date: Tue, 05 Mar 2013 11:52:02 -0500 Message-Id: Subject: control message for bug 13877 To: X-Mailer: mail (GNU Mailutils 2.1) From: Glenn Morris X-Spam-Score: -4.8 (----) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -4.8 (----) forcemerge 13374 13877 From unknown Sun Jun 22 07:51:47 2025 X-Loop: help-debbugs@gnu.org Subject: bug#13877: 24.3; gnutls.el: Enable Certificate Checks Resent-From: Ted Zlatanov Original-Sender: debbugs-submit-bounces@debbugs.gnu.org Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Thu, 14 Mar 2013 12:21:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 13877 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Glenn Morris Cc: 13374@debbugs.gnu.org, 13877@debbugs.gnu.org, Moritz Ulrich Received: via spool by 13877-submit@debbugs.gnu.org id=B13877.136326364328765 (code B ref 13877); Thu, 14 Mar 2013 12:21:02 +0000 Received: (at 13877) by debbugs.gnu.org; 14 Mar 2013 12:20:43 +0000 Received: from localhost ([127.0.0.1]:53029 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1UG79D-0007To-Vg for submit@debbugs.gnu.org; Thu, 14 Mar 2013 08:20:43 -0400 Received: from mail-vb0-f43.google.com ([209.85.212.43]:58806) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1UG794-0007TJ-06 for 13877@debbugs.gnu.org; Thu, 14 Mar 2013 08:20:34 -0400 Received: by mail-vb0-f43.google.com with SMTP id fs19so1153220vbb.30 for <13877@debbugs.gnu.org>; Thu, 14 Mar 2013 05:19:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lifelogs.com; s=google; h=x-received:from:to:cc:subject:organization:references:x-face :mail-copies-to:gmane-reply-to-list:date:in-reply-to:message-id :user-agent:mime-version:content-type; bh=/ihMoOzLkFjWBEZh09AsHN+u8zlEjwhYh0UZvDb5Avg=; b=L9P+q3CrUW2s1DRPFGX7D7FkuvU1DDUXuvc8ANIURb0u8kbJS8W1yDMQ7ANsPfQcTR 90Gqs294ueUpgWHR1nghokl/PQqHrqcK/bHeOK6wVC/0D9H+uUW90Al2lYP5pF2JAacb FR8iFvCbzpQuahUE1F8vF78pdNor70qiQMlkI= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:from:to:cc:subject:organization:references:x-face :mail-copies-to:gmane-reply-to-list:date:in-reply-to:message-id :user-agent:mime-version:content-type:x-gm-message-state; bh=/ihMoOzLkFjWBEZh09AsHN+u8zlEjwhYh0UZvDb5Avg=; b=LtQaiXphFWuZvfHBGTG+u44SZXckEp8NoqP/RuH2/RJ4irSPRdC/d498vWvRtOPuNS RIzDI64h30qqUmT1+SJJ/yBLl3Uj9E0CXAV6sb4C0os8PNWsxiK4lKjO9wUlzd41fggm OTaVoBBLUFoOFgu6cH2nmPf52tm6fzs+k23rPWp+/iTydCHBeUng0CgUb4wX2PIJKDQ0 ojgwrD121ygIqBGvr/9tn2tjBXg5pS2sP+qX2BwkISJqsRRN+bNO0RSJL06e4pb+WEvA 9UxU3naEAGj+s19IJVxy3KVpET5ewc4sIsghViuX6oQArEkFnF5oGQdgvGO1Gvnndu+9 wEzQ== X-Received: by 10.52.177.161 with SMTP id cr1mr1030936vdc.64.1363263553465; Thu, 14 Mar 2013 05:19:13 -0700 (PDT) Received: from heechee (pool-72-70-84-108.bstnma.east.verizon.net. [72.70.84.108]) by mx.google.com with ESMTPS id cl9sm1089863vdb.3.2013.03.14.05.19.11 (version=TLSv1.2 cipher=RC4-SHA bits=128/128); Thu, 14 Mar 2013 05:19:12 -0700 (PDT) From: Ted Zlatanov Organization: =?UTF-8?Q?=D0=A2=D0=B5=D0=BE=D0=B4=D0=BE=D1=80_?= =?UTF-8?Q?=D0=97=D0=BB=D0=B0=D1=82=D0=B0=D0=BD=D0=BE=D0=B2?= @ Cienfuegos References: <0evc953i3u.fsf@fencepost.gnu.org> X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Copies-To: never Gmane-Reply-To-List: yes Date: Thu, 14 Mar 2013 08:19:09 -0400 In-Reply-To: <0evc953i3u.fsf@fencepost.gnu.org> (Glenn Morris's message of "Tue, 05 Mar 2013 11:51:33 -0500") Message-ID: <878v5qcgxu.fsf@lifelogs.com> User-Agent: Gnus/5.130006 (Ma Gnus v0.6) Emacs/24.3.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Gm-Message-State: ALoCoQmsDDbXZTlYnPI6a7Pu17n3jjJQfkkQrOuUeX6fyMgRCEqgFnOQSBMF6XSr/nXlxzFeUrZQ X-Spam-Score: 0.1 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -2.6 (--) On Tue, 05 Mar 2013 11:51:33 -0500 Glenn Morris wrote: GM> Moritz Ulrich wrote: >> Currently, gnutls.el doesn't check certificate signatures when used via >> `open-network-stream' with :type 'tls or `open-gnutls-stream'. GM> Please see http://debbugs.gnu.org/13374 GM> It was considered too complicated to fix this properly for 24.3. >> There is NO way to set :verify-host, :verify-flags, etc. for this call >> to `gnutls-negotiate' when using gnutls via high-level functions like >> `open-network-stream'. >> >> I consider this a bug, as Emacs won't check any certificates and >> therefore allow man in the middle attacks without even documenting this. >> >> It should at least be possible to pass :verify-* from >> `open-network-stream' down to `gnutls-negotiate'. That would be a simple >> yet effective solution. I would like to fix this properly now that 24.3 is out, but perhaps the emacs-devel mailing list is a better place to work on it? Ted From unknown Sun Jun 22 07:51:47 2025 X-Loop: help-debbugs@gnu.org Subject: bug#13877: bug#13374: bug#13877: 24.3; gnutls.el: Enable Certificate Checks Resent-From: Ted Zlatanov Original-Sender: debbugs-submit-bounces@debbugs.gnu.org Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Wed, 27 Mar 2013 13:24:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 13877 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Glenn Morris , Moritz Ulrich Cc: 13374@debbugs.gnu.org, 13877@debbugs.gnu.org Received: via spool by 13877-submit@debbugs.gnu.org id=B13877.136439059823618 (code B ref 13877); Wed, 27 Mar 2013 13:24:01 +0000 Received: (at 13877) by debbugs.gnu.org; 27 Mar 2013 13:23:18 +0000 Received: from localhost ([127.0.0.1]:47232 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1UKqJy-00068s-1l for submit@debbugs.gnu.org; Wed, 27 Mar 2013 09:23:18 -0400 Received: from mail-qc0-f180.google.com ([209.85.216.180]:41860) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1UKqJu-00068f-V3 for 13877@debbugs.gnu.org; Wed, 27 Mar 2013 09:23:16 -0400 Received: by mail-qc0-f180.google.com with SMTP id v28so3674716qcm.11 for <13877@debbugs.gnu.org>; Wed, 27 Mar 2013 06:20:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lifelogs.com; s=google; h=x-received:from:to:cc:subject:organization:references:x-face :mail-copies-to:gmane-reply-to-list:date:in-reply-to:message-id :user-agent:mime-version:content-type; bh=W2FdrxJlte4CriHVrJgzv5lowyE+gywCopK0zc8uoWw=; b=breidF3d0e+n+B0FWt2bYSY16sBKXVMbBESd0qJFo9KnKqYyA/n/xW0/W9SKS0rmK8 //jyq6wpRrdFRtfgpm+1XYof/kCQf8fT02NDk7Aw1oUUkr7MHMsL5+P1iRLsQFWuH7iV CgBsBWxIw4I6cIPQrKTQXcV4QNtMz3gz7O0Y8= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:from:to:cc:subject:organization:references:x-face :mail-copies-to:gmane-reply-to-list:date:in-reply-to:message-id :user-agent:mime-version:content-type:x-gm-message-state; bh=W2FdrxJlte4CriHVrJgzv5lowyE+gywCopK0zc8uoWw=; b=jF3hmA34zmL8bUlDQLqWcaRva9alm1Y6jciFW0MxIo5CkB/+uk1qLyHoq3e73DUxHE SyfJvQHLZBaWON+UKxyd/L4JuuS8HKFWY2Nm0QgHSkNVeMfM/vU/+9HaQSw4FYeuAaZw D5UVfkZemBemSbzVU2DqXYTWEYzSzt43naZ4r6R+lyJg16Sx3WrMqdHfVXg4AE00A7YB 7PS68ExKJfK8u86BBXpUzhWOAxgKmxo/VwDUqAG0/mrNDNDEivZp8P7C6ofLtY0WdoXy 2tAdgYaqs+yhWdS4T1lD5JCAq9y7ee1R0y0Nckl0T6yCC/RYa1Q9fAYIZ/A+HYaqDoCl eGjw== X-Received: by 10.224.188.82 with SMTP id cz18mr12082694qab.71.1364390449945; Wed, 27 Mar 2013 06:20:49 -0700 (PDT) Received: from heechee (pool-72-93-31-86.bstnma.east.verizon.net. [72.93.31.86]) by mx.google.com with ESMTPS id c2sm15982506qeg.6.2013.03.27.06.20.47 (version=TLSv1.2 cipher=RC4-SHA bits=128/128); Wed, 27 Mar 2013 06:20:48 -0700 (PDT) From: Ted Zlatanov Organization: =?UTF-8?Q?=D0=A2=D0=B5=D0=BE=D0=B4=D0=BE=D1=80_?= =?UTF-8?Q?=D0=97=D0=BB=D0=B0=D1=82=D0=B0=D0=BD=D0=BE=D0=B2?= @ Cienfuegos References: <0evc953i3u.fsf@fencepost.gnu.org> <878v5qcgxu.fsf@lifelogs.com> X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Copies-To: never Gmane-Reply-To-List: yes Date: Wed, 27 Mar 2013 09:20:46 -0400 In-Reply-To: <878v5qcgxu.fsf@lifelogs.com> (Ted Zlatanov's message of "Thu, 14 Mar 2013 08:19:09 -0400") Message-ID: <87zjxprnbl.fsf@lifelogs.com> User-Agent: Gnus/5.130006 (Ma Gnus v0.6) Emacs/24.3.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Gm-Message-State: ALoCoQl+olyEp9SzLPoD7//v2swZvzbgTa7i0eQGDLHqbL9EuSyxeE6YHJ5afVKZoV/yJDyIBb9O X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -2.6 (--) On Thu, 14 Mar 2013 08:19:09 -0400 Ted Zlatanov wrote: TZ> On Tue, 05 Mar 2013 11:51:33 -0500 Glenn Morris wrote: GM> Moritz Ulrich wrote: >>> Currently, gnutls.el doesn't check certificate signatures when used via >>> `open-network-stream' with :type 'tls or `open-gnutls-stream'. GM> Please see http://debbugs.gnu.org/13374 GM> It was considered too complicated to fix this properly for 24.3. TZ> I would like to fix this properly now that 24.3 is out, but perhaps the TZ> emacs-devel mailing list is a better place to work on it? I started the discussion in emacs-devel. Please contribute your ideas and opinions. Ted From debbugs-submit-bounces@debbugs.gnu.org Sat Nov 02 14:46:47 2013 Received: (at control) by debbugs.gnu.org; 2 Nov 2013 18:46:48 +0000 Received: from localhost ([127.0.0.1]:59848 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1VcgDf-0001dr-I1 for submit@debbugs.gnu.org; Sat, 02 Nov 2013 14:46:47 -0400 Received: from fencepost.gnu.org ([208.118.235.10]:33859 ident=Debian-exim) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1VcgDd-0001di-FN for control@debbugs.gnu.org; Sat, 02 Nov 2013 14:46:45 -0400 Received: from rgm by fencepost.gnu.org with local (Exim 4.71) (envelope-from ) id 1VcgDd-0000z1-5Z for control@debbugs.gnu.org; Sat, 02 Nov 2013 14:46:45 -0400 Date: Sat, 02 Nov 2013 14:46:45 -0400 Message-Id: Subject: control message for bug 15792 To: X-Mailer: mail (GNU Mailutils 2.1) From: Glenn Morris X-Spam-Score: -5.5 (-----) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.5 (-----) forcemerge 13374 15792