From unknown Fri Jun 20 07:28:26 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#24396 <24396@debbugs.gnu.org> To: bug#24396 <24396@debbugs.gnu.org> Subject: Status: 25.1; Doesn't trust Let's Encrypt certificates (used by MELPA) Reply-To: bug#24396 <24396@debbugs.gnu.org> Date: Fri, 20 Jun 2025 14:28:26 +0000 retitle 24396 25.1; Doesn't trust Let's Encrypt certificates (used by MELPA) reassign 24396 emacs submitter 24396 Zack Weinberg severity 24396 normal tag 24396 security thanks From debbugs-submit-bounces@debbugs.gnu.org Thu Sep 08 13:36:26 2016 Received: (at submit) by debbugs.gnu.org; 8 Sep 2016 17:36:26 +0000 Received: from localhost ([127.0.0.1]:53846 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bi3FP-0000By-BS for submit@debbugs.gnu.org; Thu, 08 Sep 2016 13:36:26 -0400 Received: from eggs.gnu.org ([208.118.235.92]:34562) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bi3FN-0000Bm-Vy for submit@debbugs.gnu.org; Thu, 08 Sep 2016 13:36:22 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bi3FH-0006kN-6T for submit@debbugs.gnu.org; Thu, 08 Sep 2016 13:36:16 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: *** X-Spam-Status: No, score=3.2 required=5.0 tests=BAYES_50,RCVD_IN_SORBS_SPAM autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:39928) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bi3FH-0006kJ-3M for submit@debbugs.gnu.org; Thu, 08 Sep 2016 13:36:15 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:53741) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bi3FF-0002WG-GL for bug-gnu-emacs@gnu.org; Thu, 08 Sep 2016 13:36:14 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bi3FC-0006jZ-PX for bug-gnu-emacs@gnu.org; Thu, 08 Sep 2016 13:36:13 -0400 Received: from mailbackend.panix.com ([166.84.1.89]:60349) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bi3FC-0006jF-LT for bug-gnu-emacs@gnu.org; Thu, 08 Sep 2016 13:36:10 -0400 Received: from mail-wm0-f42.google.com (mail-wm0-f42.google.com [74.125.82.42]) by mailbackend.panix.com (Postfix) with ESMTPSA id 068EF1BCA5 for ; Thu, 8 Sep 2016 13:36:08 -0400 (EDT) Received: by mail-wm0-f42.google.com with SMTP id b187so181832553wme.1 for ; Thu, 08 Sep 2016 10:36:08 -0700 (PDT) X-Gm-Message-State: AE9vXwNaRRfGzMQIBODUhTDb/P4/TN89jIwXaUoWxbVKzYKKjXbJhKfCD5uPA0M2mz6p1ejglyDGE8MUifYyhw== X-Received: by 10.194.246.8 with SMTP id xs8mr780838wjc.64.1473356167483; Thu, 08 Sep 2016 10:36:07 -0700 (PDT) MIME-Version: 1.0 Received: by 10.28.36.197 with HTTP; Thu, 8 Sep 2016 10:36:06 -0700 (PDT) From: Zack Weinberg Date: Thu, 8 Sep 2016 13:36:06 -0400 X-Gmail-Original-Message-ID: Message-ID: Subject: 25.1; Doesn't trust Let's Encrypt certificates (used by MELPA) To: bug-gnu-emacs@gnu.org Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux (Android) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -2.0 (--) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.0 (--) Emacs 25.1-rc2 (prebuilt for OSX, from https://emacsformacosx.com/emacs-builds/Emacs-pretest-25.1-rc2-universal.dm= g) does not accept TLS certificates issued by Let's Encrypt (https://letsencrypt.org/). This is a particular problem because MELPA (specifically, https://stable.melpa.org) uses such a certificate. To observe the problem, run these Lisp commands: --- (require 'package) (add-to-list 'package-archives '("melpa-stable" . "https://stable.melpa.org/packages/")) (package-initialize) (package-list-packages) --- You will get a transient *Network Security Manager* buffer reading --- Certificate information Issued by: Let's Encrypt Authority X3 Issued to: CN=3Dstable.melpa.org Hostname: stable.melpa.org Public key: RSA, signature: RSA-SHA256 Protocol: TLS1.2, key: ECDHE-RSA, cipher: AES-128-GCM, mac: AEAD Security level: Medium Valid: From 2016-09-04 to 2016-12-03 The TLS connection to stable.melpa.org:443 is insecure for the following reasons: the certificate was signed by an unknown and therefore untrusted authority certificate could not be verified --- and a prompt asking whether to continue connecting. (Incidentally, the *Network Security Manager* buffer is deleted after you answer the question, and C-x o or clicking in that buffer counts as answering "no". This makes it annoyingly difficult to capture the contents of that buffer in order to, say, include it in a bug report.) zw In GNU Emacs 25.1.1 (x86_64-apple-darwin13.4.0, NS appkit-1265.21 Version 10.9.5 (Build 13F1911)) of 2016-08-21 built on builder10-9.porkrind.org Windowing system distributor 'Apple', version 10.3.1404 Configured using: 'configure --with-ns '--enable-locallisppath=3D/Library/Application Support/Emacs/${version}/site-lisp:/Library/Application Support/Emacs/site-lisp'' Configured features: NOTIFY ACL GNUTLS LIBXML2 ZLIB TOOLKIT_SCROLL_BARS NS Important settings: value of $LANG: en_US.UTF-8 locale-coding-system: utf-8-unix Major mode: Fundamental Minor modes in effect: show-paren-mode: t shell-dirtrack-mode: t tooltip-mode: t global-eldoc-mode: t electric-indent-mode: t mouse-wheel-mode: t file-name-shadow-mode: t global-font-lock-mode: t font-lock-mode: t auto-composition-mode: t auto-encryption-mode: t auto-compression-mode: t line-number-mode: t transient-mark-mode: t Recent messages: Type C-x 1 to delete the help window. Failed to download =E2=80=98melpa-stable=E2=80=99 archive. Mark set Package refresh done No apropos matches for =E2=80=98security=E2=80=99 Load-path shadows: None found. Features: (shadow sort mail-extr emacsbug sendmail apropos mm-archive message rfc822 mml mml-sec epg mailabbrev gmm-utils mailheader mm-decode mm-bodies mm-encode url-handlers mail-utils network-stream nsm starttls url-http tls gnutls mail-parse rfc2231 rfc2047 rfc2045 ietf-drums url-gw url-cache url-auth url url-proxy url-privacy url-expand url-methods url-history url-cookie url-domsuf url-util url-parse url-vars mailcap server paren cus-start cus-load tramp tramp-compat auth-source cl-seq eieio eieio-core cl-macs gnus-util mm-util help-fns mail-prsvr password-cache tramp-loaddefs trampver shell pcomplete comint ansi-color ring format-spec advice dired finder-inf package epg-config seq byte-opt gv bytecomp byte-compile cl-extra help-mode easymenu cconv cl-loaddefs pcase cl-lib time-date mule-util tooltip eldoc electric uniquify ediff-hook vc-hooks lisp-float-type mwheel ns-win ucs-normalize term/common-win tool-bar dnd fontset image regexp-opt fringe tabulated-list newcomment elisp-mode lisp-mode prog-mode register page menu-bar rfn-eshadow timer select scroll-bar mouse jit-lock font-lock syntax facemenu font-core frame cl-generic cham georgian utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao korean japanese eucjp-ms cp51932 hebrew greek romanian slovak czech european ethiopic indian cyrillic chinese charscript case-table epa-hook jka-cmpr-hook help simple abbrev minibuffer cl-preloaded nadvice loaddefs button faces cus-face macroexp files text-properties overlay sha1 md5 base64 format env code-pages mule custom widget hashtable-print-readable backquote kqueue cocoa ns multi-tty make-network-process emacs) Memory information: ((conses 16 239636 56351) (symbols 48 24300 0) (miscs 40 83 256) (strings 32 29846 8346) (string-bytes 1 864838) (vectors 16 38677) (vector-slots 8 714931 12891) (floats 8 248 88) (intervals 56 698 735) (buffers 976 22)) From debbugs-submit-bounces@debbugs.gnu.org Fri Sep 09 13:04:27 2016 Received: (at 24396) by debbugs.gnu.org; 9 Sep 2016 17:04:27 +0000 Received: from localhost ([127.0.0.1]:54847 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1biPE3-0000XH-Hc for submit@debbugs.gnu.org; Fri, 09 Sep 2016 13:04:27 -0400 Received: from eggs.gnu.org ([208.118.235.92]:50470) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1biPE1-0000X3-O0 for 24396@debbugs.gnu.org; Fri, 09 Sep 2016 13:04:26 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1biPDv-0007U1-TX for 24396@debbugs.gnu.org; Fri, 09 Sep 2016 13:04:20 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-3.2 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:48724) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1biPDu-0007T9-5t; Fri, 09 Sep 2016 13:04:18 -0400 Received: from rgm by fencepost.gnu.org with local (Exim 4.82) (envelope-from ) id 1biPDs-0001vq-CS; Fri, 09 Sep 2016 13:04:16 -0400 From: Glenn Morris To: Zack Weinberg Subject: Re: bug#24396: 25.1; Doesn't trust Let's Encrypt certificates (used by MELPA) References: X-Spook: Recovery Infrastructure security Al-Qaeda Violence X-Ran: =]^1n.2MUBkXfP*=tY@mM?C`GGWYFv8/(a?scD?y,&!'5UCx(wuVEc,'&mqG4(\3Hsr!by X-Hue: blue X-Debbugs-No-Ack: yes X-Attribution: GM Date: Fri, 09 Sep 2016 13:04:16 -0400 In-Reply-To: (Zack Weinberg's message of "Thu, 8 Sep 2016 13:36:06 -0400") Message-ID: User-Agent: Gnus (www.gnus.org), GNU Emacs (www.gnu.org/software/emacs/) MIME-Version: 1.0 Content-Type: text/plain X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -6.3 (------) X-Debbugs-Envelope-To: 24396 Cc: 24396@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -6.3 (------) Zack Weinberg wrote: > Emacs 25.1-rc2 (prebuilt for OSX, from > https://emacsformacosx.com/emacs-builds/Emacs-pretest-25.1-rc2-universal.dmg) > does not accept TLS certificates issued by Let's Encrypt > (https://letsencrypt.org/). It works fine for me on RHEL7. I believe the trusted certs are specified by the gnutls-trustfiles variable. Perhaps you need to explicitly add wherever they live on your system, and/or perhaps the default needs to be improved for Mac OS X. > (Incidentally, the *Network Security Manager* buffer is deleted after > you answer the question, and C-x o or clicking in that buffer counts > as answering "no". This sounds like a separate issue that should be fixed. From debbugs-submit-bounces@debbugs.gnu.org Fri Sep 09 13:05:11 2016 Received: (at control) by debbugs.gnu.org; 9 Sep 2016 17:05:12 +0000 Received: from localhost ([127.0.0.1]:54853 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1biPEl-0000Ys-R1 for submit@debbugs.gnu.org; Fri, 09 Sep 2016 13:05:11 -0400 Received: from eggs.gnu.org ([208.118.235.92]:50799) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1biPEl-0000Yg-3d for control@debbugs.gnu.org; Fri, 09 Sep 2016 13:05:11 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1biPEc-0007gO-GD for control@debbugs.gnu.org; Fri, 09 Sep 2016 13:05:06 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-3.2 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:48744) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1biPEc-0007gJ-Cc for control@debbugs.gnu.org; Fri, 09 Sep 2016 13:05:02 -0400 Received: from rgm by fencepost.gnu.org with local (Exim 4.82) (envelope-from ) id 1biPEc-00039p-2J for control@debbugs.gnu.org; Fri, 09 Sep 2016 13:05:02 -0400 Subject: control message for bug 24396 To: X-Mailer: mail (GNU Mailutils 2.99.98) Message-Id: From: Glenn Morris Date: Fri, 09 Sep 2016 13:05:02 -0400 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -6.3 (------) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -6.3 (------) tag 24396 security From debbugs-submit-bounces@debbugs.gnu.org Fri Sep 09 15:56:02 2016 Received: (at 24396) by debbugs.gnu.org; 9 Sep 2016 19:56:02 +0000 Received: from localhost ([127.0.0.1]:54901 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1biRu6-00087J-AB for submit@debbugs.gnu.org; Fri, 09 Sep 2016 15:56:02 -0400 Received: from eggs.gnu.org ([208.118.235.92]:57807) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1biRu3-00086w-OS for 24396@debbugs.gnu.org; Fri, 09 Sep 2016 15:56:00 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1biRtx-0004Re-SQ for 24396@debbugs.gnu.org; Fri, 09 Sep 2016 15:55:54 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-3.2 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:50493) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1biRtu-0004R3-Vk; Fri, 09 Sep 2016 15:55:51 -0400 Received: from rgm by fencepost.gnu.org with local (Exim 4.82) (envelope-from ) id 1biRts-0007Js-Vx; Fri, 09 Sep 2016 15:55:49 -0400 From: Glenn Morris To: Zack Weinberg Subject: Re: bug#24396: 25.1; Doesn't trust Let's Encrypt certificates (used by MELPA) References: X-Spook: Vaccine Syria Cyber attack condor UFO Domestic nuclear X-Ran: L^tp7c:J[h0Q>#_!u1}TXMb[Sn_^dj4Q&}%s=S[a7];`=*"SH[(WrQ.?ypk'VqCwgDti&| X-Hue: magenta X-Debbugs-No-Ack: yes X-Attribution: GM Date: Fri, 09 Sep 2016 15:55:48 -0400 In-Reply-To: (Glenn Morris's message of "Fri, 09 Sep 2016 13:04:16 -0400") Message-ID: User-Agent: Gnus (www.gnus.org), GNU Emacs (www.gnu.org/software/emacs/) MIME-Version: 1.0 Content-Type: text/plain X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -6.3 (------) X-Debbugs-Envelope-To: 24396 Cc: 24396@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -6.3 (------) http://emacs.stackexchange.com/questions/18045/how-can-i-retrieve-an-https-url-on-mac-os-x-without-warnings-about-an-untrusted seems relevant. I guess OS X uses some system keychain for SSL certs that is opaque to Emacs. Perhaps it should learn to understand it, if that's even possible. There's a suggested workaround related to libressl there. From debbugs-submit-bounces@debbugs.gnu.org Sat Sep 10 01:46:34 2016 Received: (at 24396) by debbugs.gnu.org; 10 Sep 2016 05:46:34 +0000 Received: from localhost ([127.0.0.1]:55061 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bib7Z-0007II-Tf for submit@debbugs.gnu.org; Sat, 10 Sep 2016 01:46:34 -0400 Received: from eggs.gnu.org ([208.118.235.92]:54384) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bib7X-0007I4-6s for 24396@debbugs.gnu.org; Sat, 10 Sep 2016 01:46:31 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bib7O-0002po-Ud for 24396@debbugs.gnu.org; Sat, 10 Sep 2016 01:46:26 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-3.2 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:56127) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bib7O-0002pi-Ra; Sat, 10 Sep 2016 01:46:22 -0400 Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:1735 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.82) (envelope-from ) id 1bib7M-0001Tx-KA; Sat, 10 Sep 2016 01:46:21 -0400 Date: Sat, 10 Sep 2016 08:46:19 +0300 Message-Id: <83zing8fys.fsf@gnu.org> From: Eli Zaretskii To: Glenn Morris In-reply-to: (message from Glenn Morris on Fri, 09 Sep 2016 15:55:48 -0400) Subject: Re: bug#24396: 25.1; Doesn't trust Let's Encrypt certificates (used by MELPA) References: X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -6.3 (------) X-Debbugs-Envelope-To: 24396 Cc: 24396@debbugs.gnu.org, zackw@panix.com X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Eli Zaretskii Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -6.3 (------) > From: Glenn Morris > Date: Fri, 09 Sep 2016 15:55:48 -0400 > Cc: 24396@debbugs.gnu.org > > http://emacs.stackexchange.com/questions/18045/how-can-i-retrieve-an-https-url-on-mac-os-x-without-warnings-about-an-untrusted > > seems relevant. > > I guess OS X uses some system keychain for SSL certs that is opaque to Emacs. > Perhaps it should learn to understand it, if that's even possible. Isn't that the GnuTLS job? (The OP's build is linked against GnuTLS.) That's what happens on MS-Windows: GnuTLS uses the system-wide certificate store, not the files you find on a typical Posix box. We already request GnuTLS to use system certificate store. From debbugs-submit-bounces@debbugs.gnu.org Tue Sep 26 11:43:40 2017 Received: (at control) by debbugs.gnu.org; 26 Sep 2017 15:43:40 +0000 Received: from localhost ([127.0.0.1]:33383 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dws1M-0006CU-Do for submit@debbugs.gnu.org; Tue, 26 Sep 2017 11:43:40 -0400 Received: from eggs.gnu.org ([208.118.235.92]:41735) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dws1L-0006CH-EU for control@debbugs.gnu.org; Tue, 26 Sep 2017 11:43:39 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dws1F-0001oT-OU for control@debbugs.gnu.org; Tue, 26 Sep 2017 11:43:34 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:33715) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dws1F-0001oP-L3 for control@debbugs.gnu.org; Tue, 26 Sep 2017 11:43:33 -0400 Received: from rgm by fencepost.gnu.org with local (Exim 4.82) (envelope-from ) id 1dws1F-0005Og-Ct for control@debbugs.gnu.org; Tue, 26 Sep 2017 11:43:33 -0400 Subject: control message for bug 24396 To: X-Mailer: mail (GNU Mailutils 2.99.98) Message-Id: From: Glenn Morris Date: Tue, 26 Sep 2017 11:43:33 -0400 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) merge 28603 24396 From debbugs-submit-bounces@debbugs.gnu.org Tue Sep 26 11:45:29 2017 Received: (at 24396) by debbugs.gnu.org; 26 Sep 2017 15:45:29 +0000 Received: from localhost ([127.0.0.1]:33391 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dws36-0006ja-PS for submit@debbugs.gnu.org; Tue, 26 Sep 2017 11:45:29 -0400 Received: from eggs.gnu.org ([208.118.235.92]:42203) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dws34-0006bE-HZ for 24396@debbugs.gnu.org; Tue, 26 Sep 2017 11:45:27 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dws2y-0002hm-HW for 24396@debbugs.gnu.org; Tue, 26 Sep 2017 11:45:21 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-0.6 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD, UNRESOLVED_TEMPLATE autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:33758) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dws2w-0002gh-IG; Tue, 26 Sep 2017 11:45:18 -0400 Received: from rgm by fencepost.gnu.org with local (Exim 4.82) (envelope-from ) id 1dws2w-0000MT-6v; Tue, 26 Sep 2017 11:45:18 -0400 From: Glenn Morris To: Zack Weinberg Subject: Re: bug#24396: 25.1; Doesn't trust Let's Encrypt certificates (used by MELPA) References: X-Spook: Bust Body scanner Exercise 2600 Response Critical X-Ran: 6%$5=]>,}*\vdl{~Da(4/<;M}"h)` (Glenn Morris's message of "Fri, 09 Sep 2016 13:04:16 -0400") Message-ID: User-Agent: Gnus (www.gnus.org), GNU Emacs (www.gnu.org/software/emacs/) MIME-Version: 1.0 Content-Type: text/plain X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -4.3 (----) X-Debbugs-Envelope-To: 24396 Cc: 24396@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.3 (----) Glenn Morris wrote: > I believe the trusted certs are specified by the gnutls-trustfiles > variable. Perhaps you need to explicitly add wherever they live on your > system, and/or perhaps the default needs to be improved for Mac OS X. https://debbugs.gnu.org/28603#5 says that such a change worked. From unknown Fri Jun 20 07:28:26 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Sun, 07 Jan 2018 12:24:04 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator