Subject: bug#19404: 25.0.50; Gnus shows self-signed certificate warning when connecting to Gmane

From: Lars Magne Ingebrigtsen <[email-masked]>
Date: Thu, 18 Dec 2014 19:57:28 +0100

Eli Zaretskii <[email-masked]> writes:

> Is this text returned by GnuTLS, or do we produce it in Emacs?

We produce it in Emacs.

> If the latter, can _we_ somehow distinguish between the two cases and
> add some text to that effect?

These are our translation to text from the GnuTLS error messages (which
we have previously translated to symbols).  I had hoped that the :not-ca
case would help, but I've never seen it in the wild.  

  if (EQ (status_symbol, intern (":invalid")))
    return build_string ("certificate could not be verified");

  if (EQ (status_symbol, intern (":revoked")))
    return build_string ("certificate was revoked (CRL)");

  if (EQ (status_symbol, intern (":self-signed")))
    return build_string ("certificate signer was not found (self-signed)");

  if (EQ (status_symbol, intern (":not-ca")))
    return build_string ("certificate signer is not a CA");

  if (EQ (status_symbol, intern (":insecure")))
    return build_string ("certificate was signed with an insecure algorithm");

  if (EQ (status_symbol, intern (":not-activated")))
    return build_string ("certificate is not yet activated");

  if (EQ (status_symbol, intern (":expired")))
    return build_string ("certificate has expired");

  if (EQ (status_symbol, intern (":no-host-match")))
    return build_string ("certificate host does not match hostname");

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no