GNU bug report logs - #18600
24.3.94; EWW fails to check https certificates

Previous Next

Package: emacs;

Reported by: Mark H Weaver <mhw <at> netris.org>

Date: Thu, 2 Oct 2014 06:27:02 UTC

Severity: important

Tags: fixed, security

Merged with 16193, 16978

Found in versions 24.3, 24.3.94

Fixed in version 25.1

Done: Lars Magne Ingebrigtsen <larsi <at> gnus.org>

Bug is archived. No further changes may be made.

Full log

View this message in rfc822 format

From: Glenn Morris <rgm <at> gnu.org>
To: Mark H Weaver <mhw <at> netris.org>
Cc: 18600 <at> debbugs.gnu.org
Subject: bug#18600: 24.3.94; EWW fails to check https certificates
Date: Fri, 03 Oct 2014 19:01:42 -0400

Mark H Weaver wrote:

> I used EWW to visit an https website that uses a self-signed and
> long-expired https certificate.  It failed to notify me of any problem.

Setting gnutls-verify-error non-nil may help (I don't know what it does
with self-signed certificates).
This bug report was last modified 10 years and 180 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.