Subject: bug#24396: 25.1; Doesn't trust Let's Encrypt certificates (used by MELPA)

From: Eli Zaretskii <[email-masked]>
Date: Sat, 10 Sep 2016 08:46:19 +0300

> From: Glenn Morris <[email-masked]>
> Date: Fri, 09 Sep 2016 15:55:48 -0400
> Cc: [email-masked]
> 
> http://emacs.stackexchange.com/questions/18045/how-can-i-retrieve-an-https-url-on-mac-os-x-without-warnings-about-an-untrusted
> 
> seems relevant.
> 
> I guess OS X uses some system keychain for SSL certs that is opaque to Emacs.
> Perhaps it should learn to understand it, if that's even possible.

Isn't that the GnuTLS job?  (The OP's build is linked against GnuTLS.)
That's what happens on MS-Windows: GnuTLS uses the system-wide
certificate store, not the files you find on a typical Posix box.  We
already request GnuTLS to use system certificate store.