From unknown Mon Aug 18 15:38:40 2025 X-Loop: help-debbugs@gnu.org Subject: bug#16784: 24.3; Problems opening NNTP connection: failing starttls because of a non-verified certificate Resent-From: sb@dod.no Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 17 Feb 2014 17:52:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 16784 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: 16784@debbugs.gnu.org X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.139265946916860 (code B ref -1); Mon, 17 Feb 2014 17:52:01 +0000 Received: (at submit) by debbugs.gnu.org; 17 Feb 2014 17:51:09 +0000 Received: from localhost ([127.0.0.1]:56904 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WFSLT-0004Nn-KG for submit@debbugs.gnu.org; Mon, 17 Feb 2014 12:51:09 -0500 Received: from eggs.gnu.org ([208.118.235.92]:40637) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WFSLP-0004My-GO for submit@debbugs.gnu.org; Mon, 17 Feb 2014 12:51:05 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1WFSLF-0007F8-8q for submit@debbugs.gnu.org; Mon, 17 Feb 2014 12:50:58 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=AC_HTML_NONSENSE_TAGS, BAYES_50 autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:35825) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1WFSLE-0007F1-Jm for submit@debbugs.gnu.org; Mon, 17 Feb 2014 12:50:52 -0500 Received: from eggs.gnu.org ([2001:4830:134:3::10]:42329) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1WFSL9-0003Wr-3m for bug-gnu-emacs@gnu.org; Mon, 17 Feb 2014 12:50:52 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1WFSL4-0007Dh-Be for bug-gnu-emacs@gnu.org; Mon, 17 Feb 2014 12:50:47 -0500 Received: from rainey.bang.priv.no ([212.110.185.190]:40674) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1WFSL3-0007Bo-RW for bug-gnu-emacs@gnu.org; Mon, 17 Feb 2014 12:50:42 -0500 From: sb@dod.no Date: Mon, 17 Feb 2014 18:50:32 +0100 Message-ID: <86bny5r5lj.fsf@dod.no> MIME-Version: 1.0 Content-Type: text/plain X-SA-Exim-Connect-IP: 195.31.227.158 X-SA-Exim-Rcpt-To: too long (recipient list exceeded maximum allowed size of 8 bytes) X-SA-Exim-Mail-From: sb@dod.no X-SA-Exim-Version: 4.2.1 (built Mon, 26 Dec 2011 16:57:07 +0000) X-SA-Exim-Scanned: Yes (on rainey.bang.priv.no) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.4.x-2.6.x [generic] X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -5.0 (-----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) Entering news.gmane.no nntp groups in gnus fails on Windows, because it tries to upgrade the connection using STARTTLS and fails because the news.gmane.org certificate is self signed. I did (setq gnutls-log-level 1) in the scratch buffer, and tried entering a group, and saw the following in the messages buffer: Opening nntp server on news.gmane.org...done gnutls.c: [0] (Emacs) fatal error: The TLS connection was non-properly terminated. gnutls.c: [1] (Emacs) allocating credentials gnutls.c: [1] (Emacs) gnutls callbacks gnutls.c: [1] (Emacs) gnutls_init gnutls.c: [1] (Emacs) got non-default priority string: NORMAL gnutls.c: [1] (Emacs) setting the priority string news.gmane.org certificate could not be verified. gnutls.c: [1] (Emacs) certificate signer was not found: news.gmane.org gnutls.c: [1] (Emacs) certificate validation failed: news.gmane.org gnutls.c: [0] (Emacs) fatal error: The TLS connection was non-properly terminated. apply: Server closed connection I'm using the following GNU-TLS: gnutls-3.0.9-w32-bin.zip (from http://sourceforge.net/projects/ezwinports/files/) (unzipped, and the dlls dropped into the emacs-24.3/bin/ directory) In GNU Emacs 24.3.1 (i386-mingw-nt6.2.9200) of 2013-03-17 on MARVIN Windowing system distributor `Microsoft Corp.', version 6.2.9200 Configured using: `configure --with-gcc (4.7) --cflags -ID:/devel/emacs/libs/libXpm-3.5.8/include -ID:/devel/emacs/libs/libXpm-3.5.8/src -ID:/devel/emacs/libs/libpng-dev_1.4.3-1/include -ID:/devel/emacs/libs/zlib-dev_1.2.5-2/include -ID:/devel/emacs/libs/giflib-4.1.4-1/include -ID:/devel/emacs/libs/jpeg-6b-4/include -ID:/devel/emacs/libs/tiff-3.8.2-1/include -ID:/devel/emacs/libs/gnutls-3.0.9/include -ID:/devel/emacs/libs/libiconv-1.13.1-1-dev/include -ID:/devel/emacs/libs/libxml2-2.7.8/include/libxml2' Important settings: value of $LANG: NOR locale-coding-system: cp1252 default enable-multibyte-characters: t Major mode: Article Minor modes in effect: diff-auto-refine-mode: t display-time-mode: t tooltip-mode: t mouse-wheel-mode: t tool-bar-mode: t menu-bar-mode: t file-name-shadow-mode: t global-font-lock-mode: t font-lock-mode: t blink-cursor-mode: t auto-composition-mode: t auto-encryption-mode: t auto-compression-mode: t buffer-read-only: t line-number-mode: t transient-mark-mode: t Recent input: e l l SPC m e SPC t o SPC t r y SPC a g a i n s t SPC t h e SPC g n u s SPC d e l i v e r e d SPC w i t h SPC C-p C-a M-f C-k C-k C-k . SPC I S-SPC t h i n k SPC I S-SPC w i l l SPC j s u t SPC u s t SPC r e p o r t t SPC t h e SPC b u g SPC o n SPC SPC m y SPC s y s t e m SPC a s SPC i t SPC i s . M-x g n u s e m a c s - r e p C-g M-v M-x r e p o r t - e m a c s - b u g C-x o C-x b C-x o C-x b SPC C-x o C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-SPC C-e M-w M-x Recent messages: Mark set [3 times] Auto-saving...done Auto-saving...done Mark set byte-code: End of buffer Mark set [3 times] browse-url-at-point: No URL found Auto-saving...done Quit byte-code: Command attempted to use minibuffer while in minibuffer Load-path shadows: c:/Users/sb/git/gnus/lisp/password-cache hides c:/ProgramFiles/emacs-24.3/lisp/password-cache c:/Users/sb/git/gnus/lisp/md4 hides c:/ProgramFiles/emacs-24.3/lisp/md4 c:/Users/sb/git/gnus/lisp/hex-util hides c:/ProgramFiles/emacs-24.3/lisp/hex-util c:/Users/sb/git/gnus/lisp/format-spec hides c:/ProgramFiles/emacs-24.3/lisp/format-spec c:/Users/sb/git/gnus/lisp/color hides c:/ProgramFiles/emacs-24.3/lisp/color c:/Users/sb/git/gnus/lisp/dns-mode hides c:/ProgramFiles/emacs-24.3/lisp/textmodes/dns-mode c:/Users/sb/git/gnus/lisp/tls hides c:/ProgramFiles/emacs-24.3/lisp/net/tls c:/Users/sb/git/gnus/lisp/sasl hides c:/ProgramFiles/emacs-24.3/lisp/net/sasl c:/Users/sb/git/gnus/lisp/sasl-ntlm hides c:/ProgramFiles/emacs-24.3/lisp/net/sasl-ntlm c:/Users/sb/git/gnus/lisp/sasl-digest hides c:/ProgramFiles/emacs-24.3/lisp/net/sasl-digest c:/Users/sb/git/gnus/lisp/sasl-cram hides c:/ProgramFiles/emacs-24.3/lisp/net/sasl-cram c:/Users/sb/git/gnus/lisp/ntlm hides c:/ProgramFiles/emacs-24.3/lisp/net/ntlm c:/Users/sb/git/gnus/lisp/netrc hides c:/ProgramFiles/emacs-24.3/lisp/net/netrc c:/Users/sb/git/gnus/lisp/hmac-md5 hides c:/ProgramFiles/emacs-24.3/lisp/net/hmac-md5 c:/Users/sb/git/gnus/lisp/hmac-def hides c:/ProgramFiles/emacs-24.3/lisp/net/hmac-def c:/Users/sb/git/gnus/lisp/dns hides c:/ProgramFiles/emacs-24.3/lisp/net/dns c:/Users/sb/git/gnus/lisp/dig hides c:/ProgramFiles/emacs-24.3/lisp/net/dig c:/Users/sb/git/gnus/lisp/uudecode hides c:/ProgramFiles/emacs-24.3/lisp/mail/uudecode c:/Users/sb/git/gnus/lisp/hashcash hides c:/ProgramFiles/emacs-24.3/lisp/mail/hashcash c:/Users/sb/git/gnus/lisp/binhex hides c:/ProgramFiles/emacs-24.3/lisp/mail/binhex c:/Users/sb/git/gnus/lisp/yenc hides c:/ProgramFiles/emacs-24.3/lisp/gnus/yenc c:/Users/sb/git/gnus/lisp/utf7 hides c:/ProgramFiles/emacs-24.3/lisp/gnus/utf7 c:/Users/sb/git/gnus/lisp/starttls hides c:/ProgramFiles/emacs-24.3/lisp/gnus/starttls c:/Users/sb/git/gnus/lisp/spam hides c:/ProgramFiles/emacs-24.3/lisp/gnus/spam c:/Users/sb/git/gnus/lisp/spam-wash hides c:/ProgramFiles/emacs-24.3/lisp/gnus/spam-wash c:/Users/sb/git/gnus/lisp/spam-stat hides c:/ProgramFiles/emacs-24.3/lisp/gnus/spam-stat c:/Users/sb/git/gnus/lisp/spam-report hides c:/ProgramFiles/emacs-24.3/lisp/gnus/spam-report c:/Users/sb/git/gnus/lisp/smime hides c:/ProgramFiles/emacs-24.3/lisp/gnus/smime c:/Users/sb/git/gnus/lisp/smiley hides c:/ProgramFiles/emacs-24.3/lisp/gnus/smiley c:/Users/sb/git/gnus/lisp/sieve hides c:/ProgramFiles/emacs-24.3/lisp/gnus/sieve c:/Users/sb/git/gnus/lisp/sieve-mode hides c:/ProgramFiles/emacs-24.3/lisp/gnus/sieve-mode c:/Users/sb/git/gnus/lisp/sieve-manage hides c:/ProgramFiles/emacs-24.3/lisp/gnus/sieve-manage c:/Users/sb/git/gnus/lisp/score-mode hides c:/ProgramFiles/emacs-24.3/lisp/gnus/score-mode c:/Users/sb/git/gnus/lisp/rtree hides c:/ProgramFiles/emacs-24.3/lisp/gnus/rtree c:/Users/sb/git/gnus/lisp/rfc2231 hides c:/ProgramFiles/emacs-24.3/lisp/gnus/rfc2231 c:/Users/sb/git/gnus/lisp/rfc2104 hides c:/ProgramFiles/emacs-24.3/lisp/gnus/rfc2104 c:/Users/sb/git/gnus/lisp/rfc2047 hides c:/ProgramFiles/emacs-24.3/lisp/gnus/rfc2047 c:/Users/sb/git/gnus/lisp/rfc2045 hides c:/ProgramFiles/emacs-24.3/lisp/gnus/rfc2045 c:/Users/sb/git/gnus/lisp/rfc1843 hides c:/ProgramFiles/emacs-24.3/lisp/gnus/rfc1843 c:/Users/sb/git/gnus/lisp/registry hides c:/ProgramFiles/emacs-24.3/lisp/gnus/registry c:/Users/sb/git/gnus/lisp/qp hides c:/ProgramFiles/emacs-24.3/lisp/gnus/qp c:/Users/sb/git/gnus/lisp/pop3 hides c:/ProgramFiles/emacs-24.3/lisp/gnus/pop3 c:/Users/sb/git/gnus/lisp/plstore hides c:/ProgramFiles/emacs-24.3/lisp/gnus/plstore c:/Users/sb/git/gnus/lisp/nnweb hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nnweb c:/Users/sb/git/gnus/lisp/nnvirtual hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nnvirtual c:/Users/sb/git/gnus/lisp/nntp hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nntp c:/Users/sb/git/gnus/lisp/nnspool hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nnspool c:/Users/sb/git/gnus/lisp/nnrss hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nnrss c:/Users/sb/git/gnus/lisp/nnregistry hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nnregistry c:/Users/sb/git/gnus/lisp/nnoo hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nnoo c:/Users/sb/git/gnus/lisp/nnnil hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nnnil c:/Users/sb/git/gnus/lisp/nnml hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nnml c:/Users/sb/git/gnus/lisp/nnmh hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nnmh c:/Users/sb/git/gnus/lisp/nnmbox hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nnmbox c:/Users/sb/git/gnus/lisp/nnmairix hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nnmairix c:/Users/sb/git/gnus/lisp/nnmaildir hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nnmaildir c:/Users/sb/git/gnus/lisp/nnmail hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nnmail c:/Users/sb/git/gnus/lisp/nnir hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nnir c:/Users/sb/git/gnus/lisp/nnimap hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nnimap c:/Users/sb/git/gnus/lisp/nnheader hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nnheader c:/Users/sb/git/gnus/lisp/nngateway hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nngateway c:/Users/sb/git/gnus/lisp/nnfolder hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nnfolder c:/Users/sb/git/gnus/lisp/nneething hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nneething c:/Users/sb/git/gnus/lisp/nndraft hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nndraft c:/Users/sb/git/gnus/lisp/nndoc hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nndoc c:/Users/sb/git/gnus/lisp/nndir hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nndir c:/Users/sb/git/gnus/lisp/nndiary hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nndiary c:/Users/sb/git/gnus/lisp/nnbabyl hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nnbabyl c:/Users/sb/git/gnus/lisp/nnagent hides c:/ProgramFiles/emacs-24.3/lisp/gnus/nnagent c:/Users/sb/git/gnus/lisp/mml2015 hides c:/ProgramFiles/emacs-24.3/lisp/gnus/mml2015 c:/Users/sb/git/gnus/lisp/mml1991 hides c:/ProgramFiles/emacs-24.3/lisp/gnus/mml1991 c:/Users/sb/git/gnus/lisp/mml hides c:/ProgramFiles/emacs-24.3/lisp/gnus/mml c:/Users/sb/git/gnus/lisp/mml-smime hides c:/ProgramFiles/emacs-24.3/lisp/gnus/mml-smime c:/Users/sb/git/gnus/lisp/mml-sec hides c:/ProgramFiles/emacs-24.3/lisp/gnus/mml-sec c:/Users/sb/git/gnus/lisp/mm-view hides c:/ProgramFiles/emacs-24.3/lisp/gnus/mm-view c:/Users/sb/git/gnus/lisp/mm-uu hides c:/ProgramFiles/emacs-24.3/lisp/gnus/mm-uu c:/Users/sb/git/gnus/lisp/mm-util hides c:/ProgramFiles/emacs-24.3/lisp/gnus/mm-util c:/Users/sb/git/gnus/lisp/mm-url hides c:/ProgramFiles/emacs-24.3/lisp/gnus/mm-url c:/Users/sb/git/gnus/lisp/mm-partial hides c:/ProgramFiles/emacs-24.3/lisp/gnus/mm-partial c:/Users/sb/git/gnus/lisp/mm-extern hides c:/ProgramFiles/emacs-24.3/lisp/gnus/mm-extern c:/Users/sb/git/gnus/lisp/mm-encode hides c:/ProgramFiles/emacs-24.3/lisp/gnus/mm-encode c:/Users/sb/git/gnus/lisp/mm-decode hides c:/ProgramFiles/emacs-24.3/lisp/gnus/mm-decode c:/Users/sb/git/gnus/lisp/mm-bodies hides c:/ProgramFiles/emacs-24.3/lisp/gnus/mm-bodies c:/Users/sb/git/gnus/lisp/mm-archive hides c:/ProgramFiles/emacs-24.3/lisp/gnus/mm-archive c:/Users/sb/git/gnus/lisp/messcompat hides c:/ProgramFiles/emacs-24.3/lisp/gnus/messcompat c:/Users/sb/git/gnus/lisp/message hides c:/ProgramFiles/emacs-24.3/lisp/gnus/message c:/Users/sb/git/gnus/lisp/mailcap hides c:/ProgramFiles/emacs-24.3/lisp/gnus/mailcap c:/Users/sb/git/gnus/lisp/mail-source hides c:/ProgramFiles/emacs-24.3/lisp/gnus/mail-source c:/Users/sb/git/gnus/lisp/mail-prsvr hides c:/ProgramFiles/emacs-24.3/lisp/gnus/mail-prsvr c:/Users/sb/git/gnus/lisp/mail-parse hides c:/ProgramFiles/emacs-24.3/lisp/gnus/mail-parse c:/Users/sb/git/gnus/lisp/legacy-gnus-agent hides c:/ProgramFiles/emacs-24.3/lisp/gnus/legacy-gnus-agent c:/Users/sb/git/gnus/lisp/ietf-drums hides c:/ProgramFiles/emacs-24.3/lisp/gnus/ietf-drums c:/Users/sb/git/gnus/lisp/html2text hides c:/ProgramFiles/emacs-24.3/lisp/gnus/html2text c:/Users/sb/git/gnus/lisp/gssapi hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gssapi c:/Users/sb/git/gnus/lisp/gravatar hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gravatar c:/Users/sb/git/gnus/lisp/gnus hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus c:/Users/sb/git/gnus/lisp/gnus-win hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-win c:/Users/sb/git/gnus/lisp/gnus-vm hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-vm c:/Users/sb/git/gnus/lisp/gnus-uu hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-uu c:/Users/sb/git/gnus/lisp/gnus-util hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-util c:/Users/sb/git/gnus/lisp/gnus-undo hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-undo c:/Users/sb/git/gnus/lisp/gnus-topic hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-topic c:/Users/sb/git/gnus/lisp/gnus-sync hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-sync c:/Users/sb/git/gnus/lisp/gnus-sum hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-sum c:/Users/sb/git/gnus/lisp/gnus-start hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-start c:/Users/sb/git/gnus/lisp/gnus-srvr hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-srvr c:/Users/sb/git/gnus/lisp/gnus-spec hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-spec c:/Users/sb/git/gnus/lisp/gnus-sieve hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-sieve c:/Users/sb/git/gnus/lisp/gnus-setup hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-setup c:/Users/sb/git/gnus/lisp/gnus-score hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-score c:/Users/sb/git/gnus/lisp/gnus-salt hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-salt c:/Users/sb/git/gnus/lisp/gnus-registry hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-registry c:/Users/sb/git/gnus/lisp/gnus-range hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-range c:/Users/sb/git/gnus/lisp/gnus-picon hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-picon c:/Users/sb/git/gnus/lisp/gnus-notifications hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-notifications c:/Users/sb/git/gnus/lisp/gnus-msg hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-msg c:/Users/sb/git/gnus/lisp/gnus-mlspl hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-mlspl c:/Users/sb/git/gnus/lisp/gnus-ml hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-ml c:/Users/sb/git/gnus/lisp/gnus-mh hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-mh c:/Users/sb/git/gnus/lisp/gnus-logic hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-logic c:/Users/sb/git/gnus/lisp/gnus-kill hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-kill c:/Users/sb/git/gnus/lisp/gnus-int hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-int c:/Users/sb/git/gnus/lisp/gnus-html hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-html c:/Users/sb/git/gnus/lisp/gnus-group hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-group c:/Users/sb/git/gnus/lisp/gnus-gravatar hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-gravatar c:/Users/sb/git/gnus/lisp/gnus-fun hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-fun c:/Users/sb/git/gnus/lisp/gnus-ems hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-ems c:/Users/sb/git/gnus/lisp/gnus-eform hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-eform c:/Users/sb/git/gnus/lisp/gnus-dup hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-dup c:/Users/sb/git/gnus/lisp/gnus-draft hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-draft c:/Users/sb/git/gnus/lisp/gnus-dired hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-dired c:/Users/sb/git/gnus/lisp/gnus-diary hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-diary c:/Users/sb/git/gnus/lisp/gnus-demon hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-demon c:/Users/sb/git/gnus/lisp/gnus-delay hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-delay c:/Users/sb/git/gnus/lisp/gnus-cus hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-cus c:/Users/sb/git/gnus/lisp/gnus-cite hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-cite c:/Users/sb/git/gnus/lisp/gnus-cache hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-cache c:/Users/sb/git/gnus/lisp/gnus-bookmark hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-bookmark c:/Users/sb/git/gnus/lisp/gnus-bcklg hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-bcklg c:/Users/sb/git/gnus/lisp/gnus-async hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-async c:/Users/sb/git/gnus/lisp/gnus-art hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-art c:/Users/sb/git/gnus/lisp/gnus-agent hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gnus-agent c:/Users/sb/git/gnus/lisp/gmm-utils hides c:/ProgramFiles/emacs-24.3/lisp/gnus/gmm-utils c:/Users/sb/git/gnus/lisp/flow-fill hides c:/ProgramFiles/emacs-24.3/lisp/gnus/flow-fill c:/Users/sb/git/gnus/lisp/ecomplete hides c:/ProgramFiles/emacs-24.3/lisp/gnus/ecomplete c:/Users/sb/git/gnus/lisp/deuglify hides c:/ProgramFiles/emacs-24.3/lisp/gnus/deuglify c:/Users/sb/git/gnus/lisp/compface hides c:/ProgramFiles/emacs-24.3/lisp/gnus/compface c:/Users/sb/git/gnus/lisp/canlock hides c:/ProgramFiles/emacs-24.3/lisp/gnus/canlock c:/Users/sb/git/gnus/lisp/auth-source hides c:/ProgramFiles/emacs-24.3/lisp/gnus/auth-source c:/Users/sb/git/gnus/lisp/.dir-locals hides c:/ProgramFiles/emacs-24.3/lisp/gnus/.dir-locals c:/Users/sb/git/gnus/lisp/time-date hides c:/ProgramFiles/emacs-24.3/lisp/calendar/time-date c:/Users/sb/git/gnus/lisp/parse-time hides c:/ProgramFiles/emacs-24.3/lisp/calendar/parse-time c:/Users/sb/apps/share/emacs/site-lisp/icalendar hides c:/ProgramFiles/emacs-24.3/lisp/calendar/icalendar Features: (shadow emacsbug shr-color color shr browse-url gnus-dup org-clock org-w3m org-wl org-vm org-rmail org-mhe org-mew org-irc org-habit org-jsinfo org-infojs org-html org-exp ob-exp org-exp-blocks org-agenda org-info org-gnus org-docview org-bibtex bibtex org-bbdb org-install org ob-tangle ob-ref ob-lob ob-table org-footnote org-src ob-comint ob-keys org-pcomplete pcomplete org-list org-faces org-entities noutline outline org-version ob-emacs-lisp ob org-compat org-macs ob-eval org-loaddefs find-func nnagent magit-key-mode magit view help-mode grep compile comint epa derived epg diff-mode autorevert git-rebase-mode thingatpt git-commit-mode server log-edit ring pcvs-util add-log dired url-http url-gw url-cache url-auth time-stamp vc-git pp canlock bbdb-message sendmail flow-fill mm-archive sort gnus-cite ansi-color mail-extr u-appt appt diary-lib diary-loaddefs cal-menu calendar cal-loaddefs gnus-bcklg gnus-async qp gnus-ml spam-gmane dns mm-url edmacro kmacro gnus-topic nnml nndraft nnmh utf-7 rfc2104 gnutls bbdb-gnus bbdb-mua network-stream warnings starttls gnus-agent gnus-srvr gnus-score score-mode nnvirtual gnus-cache gnus-demon nntp gnus-diary nndiary spam-report spam spam-stat bbdb-com crm bbdb bbdb-site timezone gnus-uu yenc gnus-msg gnus-art mm-uu mml2015 epg-config mm-view mml-smime smime dig supercite regi gnus-sync json advice advice-preload gnus-load bbdb-autoloads magit-autoloads info git-rebase-mode-autoloads git-commit-mode-autoloads finder-inf package cl-macs gv desktop cl cl-lib nnir gnus-sum gnus-group gnus-undo gnus-start gnus-cloud nnimap nnmail mail-source tls utf7 netrc parse-time gnus-spec gnus-int gnus-range message format-spec rfc822 mml easymenu mml-sec mm-decode mm-bodies mm-encode mail-parse rfc2231 rfc2047 rfc2045 ietf-drums mailabbrev gmm-utils mailheader gnus-win gnus gnus-ems gnus-compat url url-proxy url-privacy url-expand url-methods url-history url-cookie url-domsuf url-util url-parse auth-source eieio byte-opt bytecomp byte-compile cconv password-cache url-vars mailcap wid-edit nnoo nnheader gnus-util mm-util help-fns mail-prsvr mail-utils gnus-setup nxml-psgml-compatibility easy-mmode filladapt time jka-compr time-date tooltip ediff-hook vc-hooks lisp-float-type mwheel dos-w32 ls-lisp w32-common-fns disp-table w32-win w32-vars tool-bar dnd fontset image regexp-opt fringe tabulated-list newcomment lisp-mode register page menu-bar rfn-eshadow timer select scroll-bar mouse jit-lock font-lock syntax facemenu font-core frame cham georgian utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao korean japanese hebrew greek romanian slovak czech european ethiopic indian cyrillic chinese case-table epa-hook jka-cmpr-hook help simple abbrev minibuffer loaddefs button faces cus-face macroexp files text-properties overlay sha1 md5 base64 format env code-pages mule custom widget hashtable-print-readable backquote make-network-process w32 multi-tty emacs) From unknown Mon Aug 18 15:38:40 2025 X-Loop: help-debbugs@gnu.org Subject: bug#16784: 24.3; Problems opening NNTP connection: failing starttls because of a non-verified certificate Resent-From: Ted Zlatanov Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org, bugs@gnus.org Resent-Date: Tue, 18 Feb 2014 15:43:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 16784 X-GNU-PR-Package: emacs,gnus X-GNU-PR-Keywords: To: sb@dod.no Cc: 16784@debbugs.gnu.org Received: via spool by 16784-submit@debbugs.gnu.org id=B16784.139273817412577 (code B ref 16784); Tue, 18 Feb 2014 15:43:02 +0000 Received: (at 16784) by debbugs.gnu.org; 18 Feb 2014 15:42:54 +0000 Received: from localhost ([127.0.0.1]:58590 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WFmov-0003Gm-Mq for submit@debbugs.gnu.org; Tue, 18 Feb 2014 10:42:54 -0500 Received: from mail-qg0-f50.google.com ([209.85.192.50]:48936) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WFmoq-0003GQ-LM for 16784@debbugs.gnu.org; Tue, 18 Feb 2014 10:42:49 -0500 Received: by mail-qg0-f50.google.com with SMTP id z60so7161883qgd.9 for <16784@debbugs.gnu.org>; Tue, 18 Feb 2014 07:42:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lifelogs.com; s=google; h=from:to:cc:subject:organization:references:mail-copies-to :gmane-reply-to-list:date:in-reply-to:message-id:user-agent :mime-version:content-type; bh=Gf4bNG6KuEivnTpCaz7GJystzW+DynztSdLis2qssng=; b=DZydScX7vxMXoPKrpEolw5CC5Alm4CuPUSFRGJ9NBhVby9I0K91podPos1K78V6zgI NZJjCgjOdG1z4J6H4zEOfHQDpcCH2eH2mI/tTCL9scuHtopOTpbMVoAr516Muy/E/DXb 7L7i7/wvPbwjVdySyTmB/vAGXOY3rcimM2yd0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:subject:organization:references :mail-copies-to:gmane-reply-to-list:date:in-reply-to:message-id :user-agent:mime-version:content-type; bh=Gf4bNG6KuEivnTpCaz7GJystzW+DynztSdLis2qssng=; b=IrXHA6c8mVl5UzME5odg7RWdjehTSMKdMBmZzHI7YUHhLYLfyRzDrcRffA8m45FoYW Bpfn7busSwSbxc+HfnYGAeJ7SXHU8KEsD5cxi4tbPPrZo5ZhJzbNRVJgOpgVdStBZJNk tzAHyf9aRclv/C6X8/893CiNfXLA5jyCvj/VQS2vhdS5FoUYxfLY2Jo9kfnkfiX8RwLp DgsZorPEhUPf2peGhJTi+ZF/wQ474l2QhplXwcPL3QqvXAZ1oWyqBcduhms73kMPOtMk 9tEafpRYZy3YhbQKqXHSHH76gQNTEtpeKtAdenNChjEmSGV6o1t4PjOaNtLQxaX2BVf6 d/TA== X-Gm-Message-State: ALoCoQleYH6lb3xcMhmG/vHAOVkJMfzWG+IjN0i3U7ZrmeMkvAD3vop16Vhaj4Kq/KEH4/o/pXp4 X-Received: by 10.140.98.203 with SMTP id o69mr2746322qge.102.1392738163019; Tue, 18 Feb 2014 07:42:43 -0800 (PST) Received: from flea (c-98-229-61-72.hsd1.ma.comcast.net. [98.229.61.72]) by mx.google.com with ESMTPSA id y19sm15903498qae.20.2014.02.18.07.42.41 for (version=TLSv1.2 cipher=RC4-SHA bits=128/128); Tue, 18 Feb 2014 07:42:41 -0800 (PST) From: Ted Zlatanov Organization: =?UTF-8?Q?=D0=A2=D0=B5=D0=BE=D0=B4=D0=BE=D1=80_?= =?UTF-8?Q?=D0=97=D0=BB=D0=B0=D1=82=D0=B0=D0=BD=D0=BE=D0=B2?= @ Cienfuegos References: <86bny5r5lj.fsf@dod.no> X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Copies-To: never Gmane-Reply-To-List: yes Date: Tue, 18 Feb 2014 10:43:00 -0500 In-Reply-To: <86bny5r5lj.fsf@dod.no> (sb@dod.no's message of "Mon, 17 Feb 2014 18:50:32 +0100") Message-ID: <87ob24ctq3.fsf@lifelogs.com> User-Agent: Gnus/5.130008 (Ma Gnus v0.8) Emacs/24.3.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) On Mon, 17 Feb 2014 18:50:32 +0100 sb@dod.no wrote: s> Entering news.gmane.no nntp groups in gnus fails on Windows, because it s> tries to upgrade the connection using STARTTLS and fails because the s> news.gmane.org certificate is self signed. Steinar also posted some suggestions in the original thread: SB> I would like one of the following solutions: SB> 1. The possibility to switch off the attempted upgrade to STARTTLS for SB> NNTP connections SB> 2. The possibility to tell GNU-TLS not to be so stringent about SB> certificate verification I'll respond as soon as I'm able :) Ted From unknown Mon Aug 18 15:38:40 2025 X-Loop: help-debbugs@gnu.org Subject: bug#16784: 24.3; Problems opening NNTP connection: failing starttls because of a non-verified certificate Resent-From: Ted Zlatanov Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org, bugs@gnus.org Resent-Date: Thu, 20 Mar 2014 14:48:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 16784 X-GNU-PR-Package: emacs,gnus X-GNU-PR-Keywords: To: sb@dod.no Cc: Lars Magne Ingebrigtsen , 16784@debbugs.gnu.org Received: via spool by 16784-submit@debbugs.gnu.org id=B16784.139532685431104 (code B ref 16784); Thu, 20 Mar 2014 14:48:01 +0000 Received: (at 16784) by debbugs.gnu.org; 20 Mar 2014 14:47:34 +0000 Received: from localhost ([127.0.0.1]:42400 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WQeFp-00085b-Qj for submit@debbugs.gnu.org; Thu, 20 Mar 2014 10:47:34 -0400 Received: from mail-qc0-f170.google.com ([209.85.216.170]:65129) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WQeFn-00085O-Bg for 16784@debbugs.gnu.org; Thu, 20 Mar 2014 10:47:32 -0400 Received: by mail-qc0-f170.google.com with SMTP id e9so1084556qcy.29 for <16784@debbugs.gnu.org>; Thu, 20 Mar 2014 07:47:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lifelogs.com; s=google; h=from:to:cc:subject:organization:references:mail-copies-to :gmane-reply-to-list:date:in-reply-to:message-id:user-agent :mime-version:content-type; bh=2v5COIQyaNxoM8aRtKFYvSNMIO04ZzpO+LBy0JJ1PPk=; b=h0cHwsMQ41d9AFW6E3dN0Mg84VxsWGO8Z6ZPCrmdG2mO8FoipX/8fneynALzdPlhcH faj47nIbMd5NCGgu58ZXr/Am2kXfiQFwtuMPnUsHsa2d7fxPlFse5W0NgusY6hIYfjzN Yi3cb+yYFPftAqEzi5ST06kLAUckMJ6lp0Nxs= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:subject:organization:references :mail-copies-to:gmane-reply-to-list:date:in-reply-to:message-id :user-agent:mime-version:content-type; bh=2v5COIQyaNxoM8aRtKFYvSNMIO04ZzpO+LBy0JJ1PPk=; b=OKZ/PiAetw7HwrXKVst31Jx5BKH40B5p1IXc+Ef0C80CE3DXvqbmuMBf/RbrduvFxN g/Q3S7G/2WaVLagYCuorpPs1sYd32ZjVlNTzSm/n8PxujWmlMofJmfRi76TnslbzQbHa tMxvhHoz6rwII/XWdZ+NAiiVPfVdZEIWVdt/Grk3OAy8LtuqQiQBDMjvf4M3Xc2I4ZjS H3q/Q+U1ffOl7gjwgPHoQuDqUyR7Rj6OXO7JaM6mMIo3B1DlsfUdaKkSE7S/FnR3AqJd vvPcJPHHQ4YJtWsjLBenDYZoMm/S6KVA/TcgAWdcY/G4OhAA91Z/f2HtDiHG5lXF0fUL +SFw== X-Gm-Message-State: ALoCoQmoJSJbSEzQSV1luYWrP1LH0ML1meiKFQDMs3t6dBEQzi/l+PRW33syfhWdCrZKZbpzi0kx X-Received: by 10.229.66.202 with SMTP id o10mr50820708qci.7.1395326850582; Thu, 20 Mar 2014 07:47:30 -0700 (PDT) Received: from flea (c-98-229-61-72.hsd1.ma.comcast.net. [98.229.61.72]) by mx.google.com with ESMTPSA id x5sm3723413qaj.9.2014.03.20.07.47.29 for (version=TLSv1.2 cipher=RC4-SHA bits=128/128); Thu, 20 Mar 2014 07:47:29 -0700 (PDT) From: Ted Zlatanov Organization: =?UTF-8?Q?=D0=A2=D0=B5=D0=BE=D0=B4=D0=BE=D1=80_?= =?UTF-8?Q?=D0=97=D0=BB=D0=B0=D1=82=D0=B0=D0=BD=D0=BE=D0=B2?= @ Cienfuegos References: <86bny5r5lj.fsf@dod.no> <87ob24ctq3.fsf@lifelogs.com> X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Copies-To: never Gmane-Reply-To-List: yes Date: Thu, 20 Mar 2014 10:48:25 -0400 In-Reply-To: <87ob24ctq3.fsf@lifelogs.com> (Ted Zlatanov's message of "Tue, 18 Feb 2014 10:43:00 -0500") Message-ID: <874n2t3ozq.fsf@lifelogs.com> User-Agent: Gnus/5.130008 (Ma Gnus v0.8) Emacs/24.3.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) On Tue, 18 Feb 2014 10:43:00 -0500 Ted Zlatanov wrote: TZ> On Mon, 17 Feb 2014 18:50:32 +0100 sb@dod.no wrote: s> Entering news.gmane.no nntp groups in gnus fails on Windows, because it s> tries to upgrade the connection using STARTTLS and fails because the s> news.gmane.org certificate is self signed. SB> I would like one of the following solutions: SB> 1. The possibility to switch off the attempted upgrade to STARTTLS for SB> NNTP connections I think Lars has to give an opinion here. SB> 2. The possibility to tell GNU-TLS not to be so stringent about SB> certificate verification The latest Emacs trunk has this: (defcustom gnutls-verify-error nil "If non-nil, this should be a list of checks per hostname regex or t." :group 'gnutls :version "24.4" :type '(choice (const t) (repeat :tag "List of hostname regexps with flags for each" (list (choice :tag "Hostname" (const ".*" :tag "Any hostname") regexp) (set (const :trustfiles) (const :hostname)))))) So basically customize that variable and add :trustfiles and :hostname for the respective verifications, or nil to disable them. Also note that internally, we use some default flags for `gnutls-negotiate'. From the docstring: VERIFY-FLAGS is a numeric OR of verification flags only for `gnutls-x509pki' connections. See GnuTLS' x509.h for details; here's a recent version of the list. GNUTLS_VERIFY_DISABLE_CA_SIGN = 1, GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT = 2, GNUTLS_VERIFY_DO_NOT_ALLOW_SAME = 4, GNUTLS_VERIFY_ALLOW_ANY_X509_V1_CA_CRT = 8, GNUTLS_VERIFY_ALLOW_SIGN_RSA_MD2 = 16, GNUTLS_VERIFY_ALLOW_SIGN_RSA_MD5 = 32, GNUTLS_VERIFY_DISABLE_TIME_CHECKS = 64, GNUTLS_VERIFY_DISABLE_TRUSTED_TIME_CHECKS = 128, GNUTLS_VERIFY_DO_NOT_ALLOW_X509_V1_CA_CRT = 256 It must be omitted, a number, or nil; if omitted or nil it defaults to GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT. This is the current default, except as modified by the GnuTLS priority string. I would expect callers such as Gnus to modify this, but not normal users. Ted From unknown Mon Aug 18 15:38:40 2025 X-Loop: help-debbugs@gnu.org Subject: bug#16784: 24.3; Problems opening NNTP connection: failing starttls because of a non-verified certificate Resent-From: Lars Magne Ingebrigtsen Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org, bugs@gnus.org Resent-Date: Thu, 20 Mar 2014 14:59:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 16784 X-GNU-PR-Package: emacs,gnus X-GNU-PR-Keywords: To: sb@dod.no Cc: 16784@debbugs.gnu.org Received: via spool by 16784-submit@debbugs.gnu.org id=B16784.139532750732209 (code B ref 16784); Thu, 20 Mar 2014 14:59:02 +0000 Received: (at 16784) by debbugs.gnu.org; 20 Mar 2014 14:58:27 +0000 Received: from localhost ([127.0.0.1]:42410 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WQeQM-0008NR-Fy for submit@debbugs.gnu.org; Thu, 20 Mar 2014 10:58:26 -0400 Received: from hermes.netfonds.no ([80.91.224.195]:58695) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WQeQK-0008NG-5j for 16784@debbugs.gnu.org; Thu, 20 Mar 2014 10:58:24 -0400 Received: from cm-84.215.51.58.getinternet.no ([84.215.51.58] helo=stories.gnus.org) by hermes.netfonds.no with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1WQePz-00033a-OL; Thu, 20 Mar 2014 15:58:03 +0100 From: Lars Magne Ingebrigtsen References: <86bny5r5lj.fsf@dod.no> <87ob24ctq3.fsf@lifelogs.com> <874n2t3ozq.fsf@lifelogs.com> Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAFVBMVEU6KSMZDAnFurScjojx 6+hoWFH+/v1jfVVQAAACd0lEQVQ4jXWUwZKjIBCGG5U9y2a8ZxvN2ajkPIXoGWXY85bJ8P6PsA1k puYSkiqt/6O7/8ZWCC8WvAT30ameexACYNLe+TGt9QswIVi5hsX7SOQTWAL1NFfTgQmoFEG3lltW GDM31nLw7pnKc2uBwBruJ0sZRfkTAKtWowrfExBO/QTNas4wLHUNolHqGzDRmPkdwPLTOYb4DGIX k9EMiJwkbcoAbOxiUIpapJTGXEUCZGkTNf2EoAKsNHpknMAnAUrkWAZcDShZkyOYqNduEfG0gI/O 0G0EpItJY7tRBPmWMP0hEOCTHO1GyQiKDvaD79YLnkAVHpLtV1FXWIaDez6whgAjoDfhZraP+nIg PRt3rQkIUd3J18ekYDcoPUWcWQLNvlB97s+T7uj8uS06EQFUYx+diQ8JcXlotzrWcJXaEmiizL0t 7myLoCoXxiIQddzv7WWuUx/NhsCoGfYExeNMBbPdjgGjf85007b2GXjTJzVnMrNtXALs923JMgVQ JrVx5zLA41v3l5nixjH2AWAefc7j3R7eIQ4WzS495yosSaYpHIJK05sA8PVIOgnDoyzlOAw5An7p qKu01fkdMyDvbw+fxx9l8DMgIgGysjVGUUVJggz91BcJUA52NV3cnoB33ekLNH9W+QQYuNzZkIF7 625z1o0OBY7nQhNwThWy0qQPaFo0u8ahxAT6UjmMnmQrUbp5RvUR4BhdT47aWESSLzloAi6B6zwO f6UcYgnsUFMtt8Ix4JWUUWsTl/7XrnRpCSBupjVSt8as5rgtlxA0mmw36FFRXcqk8EwZMb6cn/Tq GyN5O7uRTCAdJ30RYH39kXkF/gM+J+kc0PYFjwAAAABJRU5ErkJggg== X-Now-Playing: Various's _Nature Mortes - Still Lives_: "Dif Juz - Re" X-Hashcash: 1:23:140320:sb@dod.no::O5Nb6PVt4uE3LoqB:000000009LgT X-Hashcash: 1:23:140320:16784@debbugs.gnu.org::Bw3xkR8IguyMSDPd:0000000000000000000000000000000000000000Pf/1 Date: Thu, 20 Mar 2014 15:58:02 +0100 In-Reply-To: <874n2t3ozq.fsf@lifelogs.com> (Ted Zlatanov's message of "Thu, 20 Mar 2014 10:48:25 -0400") Message-ID: User-Agent: Gnus/5.13001 (Ma Gnus v0.10) Emacs/24.3.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-MailScanner-ID: 1WQePz-00033a-OL X-Netfonds-MailScanner: Found to be clean X-Netfonds-MailScanner-From: larsi@gnus.org MailScanner-NULL-Check: 1395932284.04031@79Nqw206uwiHXvxf2ON5yw X-Spam-Status: No X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) Ted Zlatanov writes: > SB> I would like one of the following solutions: > SB> 1. The possibility to switch off the attempted upgrade to STARTTLS for > SB> NNTP connections > > I think Lars has to give an opinion here. I think we should always do encryption, even though we can't do validation. > So basically customize that variable and add :trustfiles and :hostname > for the respective verifications, or nil to disable them. When doing opportunistic upgrades (where the user hasn't asked for the connection to be encrypted), bothering the user with warnings about not being able to establish the identity of the server doesn't make much sense. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no From unknown Mon Aug 18 15:38:40 2025 X-Loop: help-debbugs@gnu.org Subject: bug#16784: 24.3; Problems opening NNTP connection: failing starttls because of a non-verified certificate Resent-From: Ted Zlatanov Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org, bugs@gnus.org Resent-Date: Fri, 21 Mar 2014 10:23:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 16784 X-GNU-PR-Package: emacs,gnus X-GNU-PR-Keywords: To: Lars Magne Ingebrigtsen Cc: 16784@debbugs.gnu.org, sb@dod.no Received: via spool by 16784-submit@debbugs.gnu.org id=B16784.13953973518597 (code B ref 16784); Fri, 21 Mar 2014 10:23:02 +0000 Received: (at 16784) by debbugs.gnu.org; 21 Mar 2014 10:22:31 +0000 Received: from localhost ([127.0.0.1]:42976 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WQwap-0002EU-Mo for submit@debbugs.gnu.org; Fri, 21 Mar 2014 06:22:31 -0400 Received: from mail-qc0-f177.google.com ([209.85.216.177]:60454) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WQwaj-0002EB-8A for 16784@debbugs.gnu.org; Fri, 21 Mar 2014 06:22:25 -0400 Received: by mail-qc0-f177.google.com with SMTP id w7so2455898qcr.36 for <16784@debbugs.gnu.org>; Fri, 21 Mar 2014 03:22:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lifelogs.com; s=google; h=from:to:cc:subject:organization:references:mail-copies-to :gmane-reply-to-list:date:in-reply-to:message-id:user-agent :mime-version:content-type; bh=bt+dEHSFnpe36F+TGTwmHhF6NNMy2pHvgiRVUFE1Jzw=; b=pYIKhnxo3EdqTewyAO2kT71rwPpP+FJf0Nfcej1lh9diMnOfZxzmM4YTWNm7Esw0lb EFDAnHRpzC+bRRE9EtYUMDtutu1s+SajlYPaevM/geBAtgPXxa0lWPA4CbscKdPVqooD 8og805YDvzYnkKPzBGqxjkmiKqlovUI9nvsDs= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:subject:organization:references :mail-copies-to:gmane-reply-to-list:date:in-reply-to:message-id :user-agent:mime-version:content-type; bh=bt+dEHSFnpe36F+TGTwmHhF6NNMy2pHvgiRVUFE1Jzw=; b=YYOm0LLT5FFyqXmxph+LXQRM/RysT3710i880Ro1YRIq7/hSJHkQZMpwnz9jkVAY+l slCKtlJaP7Q33tnfU+tkg7fGJBN+TnqMrS7R90JpCebofnEujLTelDP4TPQX6mrVqe68 fTMPaQXN/vV105Ix1OVCJ4aiGogCrOemyrOFMnRN5NJJQNmfO4LsN0dgnxgUfH7+cXZC NmbVMIMQ+dlNZJADudXs2NXFz+b5uXgf9tRJyHQ5DHGtjIr8m588zIT4L+jiBsRact8m 93EB5tQ2LAY14JSIPEjz7eVznJHnEsw/XBSSWiq8Uy9X29F3ymw1DAISp6tHW8OGhFQh pMUg== X-Gm-Message-State: ALoCoQlSprB6+j/WVeCAMzQYm2maJPr7rwafKWiqG+3CdsnuVslDbGWDqArfa0NqJJNY1egQzmkz X-Received: by 10.229.136.135 with SMTP id r7mr33080920qct.17.1395397340578; Fri, 21 Mar 2014 03:22:20 -0700 (PDT) Received: from flea (c-98-229-61-72.hsd1.ma.comcast.net. [98.229.61.72]) by mx.google.com with ESMTPSA id l20sm7180864qgd.16.2014.03.21.03.22.19 for (version=TLSv1.2 cipher=RC4-SHA bits=128/128); Fri, 21 Mar 2014 03:22:19 -0700 (PDT) From: Ted Zlatanov Organization: =?UTF-8?Q?=D0=A2=D0=B5=D0=BE=D0=B4=D0=BE=D1=80_?= =?UTF-8?Q?=D0=97=D0=BB=D0=B0=D1=82=D0=B0=D0=BD=D0=BE=D0=B2?= @ Cienfuegos References: <86bny5r5lj.fsf@dod.no> <87ob24ctq3.fsf@lifelogs.com> <874n2t3ozq.fsf@lifelogs.com> X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Copies-To: never Gmane-Reply-To-List: yes Date: Fri, 21 Mar 2014 06:23:16 -0400 In-Reply-To: (Lars Magne Ingebrigtsen's message of "Thu, 20 Mar 2014 15:58:02 +0100") Message-ID: <87ob0z3l63.fsf@lifelogs.com> User-Agent: Gnus/5.130008 (Ma Gnus v0.8) Emacs/24.3.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) On Thu, 20 Mar 2014 15:58:02 +0100 Lars Magne Ingebrigtsen wrote: LMI> Ted Zlatanov writes: SB> I would like one of the following solutions: SB> 1. The possibility to switch off the attempted upgrade to STARTTLS for SB> NNTP connections >> >> I think Lars has to give an opinion here. LMI> I think we should always do encryption, even though we can't do validation. So the answer is "no" to Steinar's question. I have to agree, although it may be noisier, in 2014 it's the right way. >> So basically customize that variable and add :trustfiles and :hostname >> for the respective verifications, or nil to disable them. LMI> When doing opportunistic upgrades (where the user hasn't asked for the LMI> connection to be encrypted), bothering the user with warnings about not LMI> being able to establish the identity of the server doesn't make much LMI> sense. I can only suggest overriding `gnutls-log-level' but that doesn't make much sense if you're planning to use that connection, in which case you care about those warnings. Do we need a way to defer GnuTLS warnings (put them in a variable temporarily)? Ted From unknown Mon Aug 18 15:38:40 2025 X-Loop: help-debbugs@gnu.org Subject: bug#16784: 24.3; Problems opening NNTP connection: failing starttls because of a non-verified certificate Resent-From: Steinar Bang Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org, bugs@gnus.org Resent-Date: Fri, 21 Mar 2014 10:35:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 16784 X-GNU-PR-Package: emacs,gnus X-GNU-PR-Keywords: To: Lars Magne Ingebrigtsen Cc: 16784@debbugs.gnu.org Received: via spool by 16784-submit@debbugs.gnu.org id=B16784.139539806310313 (code B ref 16784); Fri, 21 Mar 2014 10:35:02 +0000 Received: (at 16784) by debbugs.gnu.org; 21 Mar 2014 10:34:23 +0000 Received: from localhost ([127.0.0.1]:43002 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WQwmJ-0002g1-4n for submit@debbugs.gnu.org; Fri, 21 Mar 2014 06:34:23 -0400 Received: from rainey.bang.priv.no ([212.110.185.190]:35412) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WQwmE-0002fe-0l for 16784@debbugs.gnu.org; Fri, 21 Mar 2014 06:34:17 -0400 From: Steinar Bang References: <86bny5r5lj.fsf@dod.no> <87ob24ctq3.fsf@lifelogs.com> <874n2t3ozq.fsf@lifelogs.com> Date: Fri, 21 Mar 2014 11:33:59 +0100 In-Reply-To: (Lars Magne Ingebrigtsen's message of "Thu, 20 Mar 2014 15:58:02 +0100") Message-ID: User-Agent: Gnus/5.130008 (Ma Gnus v0.8) Emacs/24.3 (windows-nt) MIME-Version: 1.0 Content-Type: text/plain X-SA-Exim-Connect-IP: 195.204.41.10 X-SA-Exim-Rcpt-To: too long (recipient list exceeded maximum allowed size of 8 bytes) X-SA-Exim-Mail-From: sb@dod.no X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on rainey.bang.priv.no X-Spam-Level: X-Spam-Status: No, score=-4.4 required=5.0 tests=ALL_TRUSTED,BAYES_00, GREYLIST_ISWHITE autolearn=ham version=3.3.2 X-SA-Exim-Version: 4.2.1 (built Mon, 26 Dec 2011 16:57:07 +0000) X-SA-Exim-Scanned: Yes (on rainey.bang.priv.no) X-Spam-Score: -0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) >>>>> Lars Magne Ingebrigtsen : > Ted Zlatanov writes: SB> I would like one of the following solutions: SB> 1. The possibility to switch off the attempted upgrade to STARTTLS for SB> NNTP connections >> I think Lars has to give an opinion here. > I think we should always do encryption, even though we can't do validation. The reason I asked for this, is that if an ecryption I didn't ask for causes the connection to fail, I would like to be able to turn it off and have my unsafe connection. I would rather have an unsafe conncetion than no connection (which is what I seem to have right now on Windows). From unknown Mon Aug 18 15:38:40 2025 X-Loop: help-debbugs@gnu.org Subject: bug#16784: 24.3; Problems opening NNTP connection: failing starttls because of a non-verified certificate Resent-From: Lars Magne Ingebrigtsen Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org, bugs@gnus.org Resent-Date: Mon, 24 Mar 2014 12:15:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 16784 X-GNU-PR-Package: emacs,gnus X-GNU-PR-Keywords: To: 16784@debbugs.gnu.org Received: via spool by 16784-submit@debbugs.gnu.org id=B16784.1395663280305 (code B ref 16784); Mon, 24 Mar 2014 12:15:02 +0000 Received: (at 16784) by debbugs.gnu.org; 24 Mar 2014 12:14:40 +0000 Received: from localhost ([127.0.0.1]:46766 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WS3m1-0008WS-0a for submit@debbugs.gnu.org; Mon, 24 Mar 2014 08:14:40 -0400 Received: from hermes.netfonds.no ([80.91.224.195]:58618) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WS3lv-0008WF-N5 for 16784@debbugs.gnu.org; Mon, 24 Mar 2014 08:14:35 -0400 Received: from cm-84.215.51.58.getinternet.no ([84.215.51.58] helo=stories.gnus.org) by hermes.netfonds.no with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1WS3lc-00045l-Gx for 16784@debbugs.gnu.org; Mon, 24 Mar 2014 13:14:12 +0100 From: Lars Magne Ingebrigtsen References: <86bny5r5lj.fsf@dod.no> <87ob24ctq3.fsf@lifelogs.com> <874n2t3ozq.fsf@lifelogs.com> Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAElBMVEVBTFw4RFNNVWSOlaAy NkIkJi8NWn0KAAACeklEQVQ4ja1TS47lIAw0Fm8PiOyNQ+9bry8QMmafRHD/q0wx6t18VoMSlMh2 UVU2FH9fbm30h0D8VyDQd7H7reLrL+t/BnTt+/e7lr7xIuAiqxjvn4+W+KiSayr+2ImdJcosx3YI ISmyeI1IMNUy2ELioGttj6Zde6LXkIYsIpdUoh6lMcL1pou2+agLgXxAyLMyLRDAlmmnZBdICeBl FSQlGiaxOyWm5EPJ6b01fqOO6lSV4FujoDiG8JP3t6sU8+VitlTufqq3oO+P+bw10zYiBKZ8FhSI yyDVB0AohuAalLTkzmaRX2MvM30JZZuWWHo4/KHlJOWnWj+/SNgFlOfBDhC1wbH9c86H+lVi5iQ4 NYexekwQqJ20QHCf0dlw1ha+ioOB0DGbQdm4WCLSYgtQ7wQusD21j1TE+hHfZRu3gjlRFAbWaKhO GY5bwhElU57DTZVsUFUHi81TUlwWO9ezS/4qyIyGBhRweXR187Zz9Wi7gM1UL/UD7oq+7uKCt0ty kjmSenRRK6mfC13DK0hPkCETRsD/pS3ffVioI4NafhaFodRIttP/6ucLhLherh/af9BdW06aLQiy GYzhSXF9UmBifxazNqMAymy5DxP7gTG51qjVEWPjnjBTZU0iRrfPRL6fAOttWT5O3Ql88D3NMrF+ TBgoHQCVbnfACjHK4NInNjXMu1KJZuixZhETsN76o8zrjGmwoSJ3haXbcSplXOfJvaU1fqxOZcB9 OUbgQTrygM/zrJpxAsz3LWrGzZpG6JXWQ+cEdy3ecKGU7iaSSnLzYFhj+caInrElZLMUWB9Xtr5G bF9lA1Fq8Gba4jStD+jNGHo8PwFhzaukIiiSlAAAAABJRU5ErkJggg== X-Now-Playing: Fennesz, Sakamoto's _Flumina (1)_: "0404" X-Hashcash: 1:23:140324:sb@dod.no::mWS11y0hixPbV0OF:000000001x2Y X-Hashcash: 1:23:140324:16784@debbugs.gnu.org::heCoQt9f21DSz9cG:0000000000000000000000000000000000000002BlpQ Date: Mon, 24 Mar 2014 13:14:12 +0100 In-Reply-To: (Steinar Bang's message of "Fri, 21 Mar 2014 11:33:59 +0100") Message-ID: User-Agent: Gnus/5.13001 (Ma Gnus v0.10) Emacs/24.3.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-MailScanner-ID: 1WS3lc-00045l-Gx X-Netfonds-MailScanner: Found to be clean X-Netfonds-MailScanner-From: larsi@gnus.org MailScanner-NULL-Check: 1396268053.03873@8s6NeWIDwqpkkDOa4MiVOw X-Spam-Status: No X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) Steinar Bang writes: >>>>>> Lars Magne Ingebrigtsen : > >> Ted Zlatanov writes: > SB> I would like one of the following solutions: > SB> 1. The possibility to switch off the attempted upgrade to STARTTLS for > SB> NNTP connections > >>> I think Lars has to give an opinion here. > >> I think we should always do encryption, even though we can't do validation. > > The reason I asked for this, is that if an ecryption I didn't ask for > causes the connection to fail, I would like to be able to turn it off > and have my unsafe connection. Yeah, but I's saying that the connection shouldn't fail. >"? If you didn't ask for encryption, but Emacs decides to do STARTTLS anyway, then Emacs should not do identity validation. Except perhaps just issue a message saying "couldn't validate TLS identity" or something at the most. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no From unknown Mon Aug 18 15:38:40 2025 X-Loop: help-debbugs@gnu.org Subject: bug#16784: 24.3; Problems opening NNTP connection: failing starttls because of a non-verified certificate Resent-From: Lars Magne Ingebrigtsen Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org, bugs@gnus.org Resent-Date: Mon, 08 Dec 2014 20:08:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 16784 X-GNU-PR-Package: emacs,gnus X-GNU-PR-Keywords: To: sb@dod.no Cc: 16784@debbugs.gnu.org Received: via spool by 16784-submit@debbugs.gnu.org id=B16784.141806925126966 (code B ref 16784); Mon, 08 Dec 2014 20:08:02 +0000 Received: (at 16784) by debbugs.gnu.org; 8 Dec 2014 20:07:31 +0000 Received: from localhost ([127.0.0.1]:58118 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Xy4ag-00070r-Uq for submit@debbugs.gnu.org; Mon, 08 Dec 2014 15:07:31 -0500 Received: from hermes.netfonds.no ([80.91.224.195]:59024) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Xy4af-00070j-2h for 16784@debbugs.gnu.org; Mon, 08 Dec 2014 15:07:29 -0500 Received: from cm-84.215.51.58.getinternet.no ([84.215.51.58] helo=stories.gnus.org) by hermes.netfonds.no with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1Xy4aM-00067l-UF; Mon, 08 Dec 2014 21:07:10 +0100 From: Lars Magne Ingebrigtsen References: <86bny5r5lj.fsf@dod.no> X-Now-Playing: David Bowie's _The Next Day_: "The Stars (Are Out Tonight)" X-Hashcash: 1:23:141208:16784@debbugs.gnu.org::K7TFQgk4XcFBJW/f:0000000000000000000000000000000000000000I/B7 X-Hashcash: 1:23:141208:sb@dod.no::8h/K6amFkGVY+OdI:00000000f/OV Date: Mon, 08 Dec 2014 21:07:10 +0100 In-Reply-To: <86bny5r5lj.fsf@dod.no> (sb@dod.no's message of "Mon, 17 Feb 2014 18:50:32 +0100") Message-ID: User-Agent: Gnus/5.130012 (Ma Gnus v0.12) Emacs/25.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-MailScanner-ID: 1Xy4aM-00067l-UF X-Netfonds-MailScanner: Found to be clean X-Netfonds-MailScanner-From: larsi@gnus.org MailScanner-NULL-Check: 1418674031.17484@FBYbIK+y61w/9v8l7rpEmg X-Spam-Status: No X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) sb@dod.no writes: > Entering news.gmane.no nntp groups in gnus fails on Windows, because it > tries to upgrade the connection using STARTTLS and fails because the > news.gmane.org certificate is self signed. This should now be fixed due to the NSM stuff, I think? So I'm closing this report. Please reopen if this is still a problem. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no From debbugs-submit-bounces@debbugs.gnu.org Mon Dec 08 15:07:33 2014 Received: (at control) by debbugs.gnu.org; 8 Dec 2014 20:07:33 +0000 Received: from localhost ([127.0.0.1]:58121 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Xy4aj-000717-DK for submit@debbugs.gnu.org; Mon, 08 Dec 2014 15:07:33 -0500 Received: from hermes.netfonds.no ([80.91.224.195]:59030) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Xy4ai-000710-LT for control@debbugs.gnu.org; Mon, 08 Dec 2014 15:07:32 -0500 Received: from cm-84.215.51.58.getinternet.no ([84.215.51.58] helo=stories.gnus.org) by hermes.netfonds.no with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1Xy4aQ-00067x-Nk for control@debbugs.gnu.org; Mon, 08 Dec 2014 21:07:14 +0100 Date: Mon, 08 Dec 2014 21:07:14 +0100 Message-Id: To: control@debbugs.gnu.org From: Lars Magne Ingebrigtsen Subject: control message for bug #16784 X-MailScanner-ID: 1Xy4aQ-00067x-Nk X-Netfonds-MailScanner: Found to be clean X-Netfonds-MailScanner-From: larsi@gnus.org MailScanner-NULL-Check: 1418674035.59101@5wX0bhAIwAOMKNH3/x3gqg X-Spam-Status: No X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) tags 16784 fixed close 16784 25.1