GNU bug report logs - #23027
25.1.50; Emacs refuses to talk to eternal-september because they now use an MD5 certificate, apparently

Previous Next

Full log

View this message in rfc822 format

From: Lars Magne Ingebrigtsen <larsi <at> gnus.org>
To: 23027 <at> debbugs.gnu.org
Subject: bug#23027: 25.1.50; Emacs refuses to talk to eternal-september because they now use an MD5 certificate, apparently
Date: Sun, 24 Apr 2016 16:14:52 +0200

[larsi <at> stories ~/src/emacs/trunk]$ gnutls-cli -p nntps news.eternal-september.org
Resolving 'news.eternal-september.org'...
Connecting to '213.239.209.88:563'...
*** Fatal error: The signature algorithm is not supported.
*** Handshake has failed
GnuTLS error: The signature algorithm is not supported.

That's not very helpful.

However, on a newer machine it says:

- Certificate[1] info:
 - subject `O=Root CA,OU=http://www.cacert.org,CN=CA Cert Signing Authority,EMAIL=support <at> cacert.org', issuer `O=Root CA,OU=http://www.cacert.org,CN=CA Cert Signing Authority,EMAIL=support <at> cacert.org', RSA key 4096 bits, signed using RSA-MD5 (broken!), activated `2003-03-30 12:29:49 UTC', expires `2033-03-29 12:29:49 UTC', SHA-1 fingerprint `135cec36f49cb8e93b1ab270cd80884676ce8f33'

So there's the MD5.

So it like fails on several levels: On older machines, the GnuTLS
library is too old, and on newer machines, it refuses the connection
because of the MD5...

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.