From unknown Tue Jun 24 17:23:46 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#26835 <26835@debbugs.gnu.org> To: bug#26835 <26835@debbugs.gnu.org> Subject: Status: 26.0.50; url-retrieve no longer raises certificate errors Reply-To: bug#26835 <26835@debbugs.gnu.org> Date: Wed, 25 Jun 2025 00:23:46 +0000 retitle 26835 26.0.50; url-retrieve no longer raises certificate errors reassign 26835 emacs submitter 26835 Aaron Jensen severity 26835 normal tag 26835 security thanks From debbugs-submit-bounces@debbugs.gnu.org Mon May 08 14:43:12 2017 Received: (at submit) by debbugs.gnu.org; 8 May 2017 18:43:12 +0000 Received: from localhost ([127.0.0.1]:60043 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d7nch-0001W5-39 for submit@debbugs.gnu.org; Mon, 08 May 2017 14:43:12 -0400 Received: from eggs.gnu.org ([208.118.235.92]:51466) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d7ncf-0001Vb-BM for submit@debbugs.gnu.org; Mon, 08 May 2017 14:43:06 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1d7ncW-0000DP-FM for submit@debbugs.gnu.org; Mon, 08 May 2017 14:43:00 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,FREEMAIL_FROM, T_DKIM_INVALID autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:40290) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1d7ncW-0000DL-BY for submit@debbugs.gnu.org; Mon, 08 May 2017 14:42:56 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:42421) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1d7ncR-0001Bd-RV for bug-gnu-emacs@gnu.org; Mon, 08 May 2017 14:42:56 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1d7ncO-0000Ao-5a for bug-gnu-emacs@gnu.org; Mon, 08 May 2017 14:42:51 -0400 Received: from mail-yb0-x230.google.com ([2607:f8b0:4002:c09::230]:36527) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1d7ncN-0000AX-U5 for bug-gnu-emacs@gnu.org; Mon, 08 May 2017 14:42:48 -0400 Received: by mail-yb0-x230.google.com with SMTP id s22so13789552ybe.3 for ; Mon, 08 May 2017 11:42:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to :content-transfer-encoding; bh=ur/j1s3o95jFhpk8BlRtNmPH20PAjFUzTRi4d8SjDwU=; b=ReE+E/ZE5/HF+Ynu00wOlalbcaUa3d/kcwnC77tR6TFNwNOt0e/srvLL+pD0at3gkx 3ZVa8bwyLbNgLZVG6tACIHIgL5wb4XCnlC1PWwYqpkYKdQZGu+mp+vbcblPl1S3rHWgY +KccZHvCwgFxqEA45OJ6Uc8bqpLWvA3Sf/MiKmA+P1KvrKqTm5EeCJgY2tkap1nRTU31 RY6lv2+eeAz1TRcl8V4oEdZ0yawLfkNrEvVDgYWUD+huBalKedUTl7MxdRX4BmuQ/59P p+bL0lgLk8oVXYbvbd6QIIneIqYZRtLw+tJhVQYF0nuN2LB3+mgXnoIC3YqgkMAOgqjV rd9A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to :content-transfer-encoding; bh=ur/j1s3o95jFhpk8BlRtNmPH20PAjFUzTRi4d8SjDwU=; b=jnBTRfV1F/kHztK3nRPZUuaEpWoCRbDIHJX6mMYnUOp//Eq28MayGu8b4kbldwH934 TwMw8odDU/DRq0eyelVzEHIirJs/qByX02EkRfhE2xY0rsKB8jl4WwWCUhe8aLfxkFJs 05F38h9byb7LM/Dak9U5craXTURCQel2QPzTvLUsbcbtA6ck3/uq52SY+VzfMQuswtCh wOF2kFtanPfV7773vjSgWi4Qo8sv9VmVEiqJKcg59BHiWceMoqtEZ8KPJ75MiethjUKR 4r+Krzmvbjh3UYggA+tTFliSovlB+yNJU0Fysukrfv4cGY7YdVhQb0fEqCHYul4Hr6Hl wQTg== X-Gm-Message-State: AODbwcBwg6DdQBzqaGxBnpLAf11dINgdzPoUzzpKnYirlYyi3AztyZ/R Zbpjrosi7Uh9Mo4iiOGcyPN7EQvqgczQpeU= X-Received: by 10.37.66.3 with SMTP id p3mr11970006yba.132.1494268966275; Mon, 08 May 2017 11:42:46 -0700 (PDT) MIME-Version: 1.0 Received: by 10.37.17.6 with HTTP; Mon, 8 May 2017 11:42:45 -0700 (PDT) From: Aaron Jensen Date: Mon, 8 May 2017 11:42:45 -0700 Message-ID: Subject: 26.0.50; url-retrieve no longer raises certificate errors To: bug-gnu-emacs@gnu.org Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.0 (----) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 1.0 (+) This post describes a method for configuring emacs to verify ssl certificates: https://glyph.twistedmatrix.com/2015/11/editor-malware.html It also contains a snippet to test that it is properly configured: (let ((bad-hosts (loop for bad in `("https://wrong.host.badssl.com/" "https://self-signed.badssl.com/") if (condition-case e (url-retrieve bad (lambda (retrieved) t)) (error nil)) collect bad))) (if bad-hosts (print (format "tls misconfigured; retrieved %s ok" bad-hosts)) (url-retrieve "https://badssl.com" (lambda (retrieved) t)))) This snippet works fine in 25.2 but reports an error on master (26.0.50) As a simpler test, both: (url-retrieve "https://wrong.host.badssl.com/") (url-retrieve-synchronously "https://wrong.host.badssl.com/") Should fail, but do not. This is the log output with gnutls-log-level 2 Contacting host: wrong.host.badssl.com:443 gnutls.c: [1] (Emacs) connecting to host: wrong.host.badssl.com gnutls.c: [1] (Emacs) allocating credentials gnutls.c: [2] (Emacs) allocating x509 credentials gnutls.c: [2] (Emacs) using default verification flags gnutls.c: [audit] There was a non-CA certificate in the trusted list: O=3DEntrust.net,OU=3Dwww.entrust.net/CPS_2048 incorp. by ref. (limits liab.),OU=3D(c) 1999 Entrust.net Limited,CN=3DEntrust.net Certification Authority (2048). gnutls.c: [1] (Emacs) setting the trustfile: /usr/local/etc/libressl/cert.= pem gnutls.c: [audit] There was a non-CA certificate in the trusted list: O=3DEntrust.net,OU=3Dwww.entrust.net/CPS_2048 incorp. by ref. (limits liab.),OU=3D(c) 1999 Entrust.net Limited,CN=3DEntrust.net Certification Authority (2048). gnutls.c: [1] (Emacs) gnutls callbacks gnutls.c: [1] (Emacs) gnutls_init gnutls.c: [1] (Emacs) got non-default priority string: NORMAL gnutls.c: [1] (Emacs) setting the priority string gnutls.c: [audit] Note that the security level of the Diffie-Hellman key exchange has been lowered to 256 bits and this may allow decryption of the session data gnutls.c: [2] HSK[0x1178ab200]: sent server name: 'wrong.host.badssl.com' gnutls.c: [1] (Emacs) non-fatal error: Resource temporarily unavailable, try again. [3 times] gnutls.c: [2] received curve SECP256R1 gnutls.c: [1] (Emacs) non-fatal error: Resource temporarily unavailable, try again. [2 times] gnutls.c: [2] (Emacs) Deallocating x509 credentials Has the usage of url-retrieve changed such that it no longer throws errors in this case or is this a bug? If it is not a bug, what is the new preferred way of verifying that certificate validation is indeed working? Thanks! In GNU Emacs 26.0.50 (build 1, x86_64-apple-darwin16.5.0, NS appkit-1504.82 Version 10.12.4 (Build 16E195)) of 2017-05-08 built on aaron Repository revision: 52f7440b8ea8e18f7e83f8d107bd5e4df1bda7b1 Windowing system distributor 'Apple', version 10.3.1504 Recent messages: Saving file /Users/aaronjensen/.emacs.d/.cache/personal.org... Wrote =E2=80=98/Users/aaronjensen/.emacs.d/.cache/personal.org=E2=80=99 Fetched data overwrote /Users/aaronjensen/.emacs.d/.cache/personal.org Saving file /Users/aaronjensen/.emacs.d/.cache/work.org... Wrote =E2=80=98/Users/aaronjensen/.emacs.d/.cache/work.org=E2=80=99 Fetched data overwrote /Users/aaronjensen/.emacs.d/.cache/work.org Added 4 events for today 0 (#o0, #x0, ?\C-@) Configured using: 'configure --disable-dependency-tracking --disable-silent-rules --enable-locallisppath=3D/usr/local/share/emacs/site-lisp --infodir=3D/usr/local/Cellar/emacs-plus/HEAD-52f7440/share/info/emacs --prefix=3D/usr/local/Cellar/emacs-plus/HEAD-52f7440 --with-xml2 --without-dbus --with-gnutls --with-imagemagick --with-modules --with-rsvg --with-ns --disable-ns-self-contained' Configured features: JPEG RSVG IMAGEMAGICK NOTIFY ACL GNUTLS LIBXML2 ZLIB TOOLKIT_SCROLL_BARS NS MODULES Important settings: value of $LANG: en_US.UTF-8 locale-coding-system: utf-8-unix Major mode: Text Minor modes in effect: eros-mode: t yas-global-mode: t yas-minor-mode: t org-mobile-sync-mode: t magit-auto-revert-mode: t projectile-mode: t recentf-mode: t flyspell-mode: t evil-mc-mode: t hl-todo-mode: t global-spacemacs-whitespace-cleanup-mode: t spacemacs-whitespace-cleanup-mode: t ws-butler-global-mode: t ws-butler-mode: t winum-mode: t winner-mode: t volatile-highlights-mode: t global-vi-tilde-fringe-mode: t vi-tilde-fringe-mode: t pupo-mode: t purpose-mode: t spaceline-info-mode: t spaceline-helm-mode: t save-place-mode: t savehist-mode: t popwin-mode: t persp-mode: t Info-breadcrumbs-in-mode-line-mode: t global-git-gutter+-mode: t global-git-commit-mode: t async-bytecomp-package-mode: t shell-dirtrack-mode: t global-flycheck-mode: t flx-ido-mode: t eyebrowse-mode: t global-evil-surround-mode: t evil-surround-mode: t global-evil-search-highlight-persist: t evil-search-highlight-persist: t show-smartparens-global-mode: t show-smartparens-mode: t evil-escape-mode: t global-anzu-mode: t anzu-mode: t eval-sexp-fu-flash-mode: t editorconfig-mode: t dtrt-indent-mode: t diff-auto-refine-mode: t counsel-mode: t ivy-mode: t clean-aindent-mode: t hybrid-mode: t which-key-mode: t override-global-mode: t global-undo-tree-mode: t undo-tree-mode: t evil-mode: t evil-local-mode: t spacemacs-leader-override-mode: t global-spacemacs-leader-override-mode: t global-hl-line-mode: t xterm-mouse-mode: t global-auto-revert-mode: t ido-vertical-mode: t global-page-break-lines-mode: t global-eldoc-mode: t electric-indent-mode: t mouse-wheel-mode: t menu-bar-mode: t file-name-shadow-mode: t global-font-lock-mode: t font-lock-mode: t auto-composition-mode: t auto-encryption-mode: t auto-compression-mode: t column-number-mode: t line-number-mode: t auto-fill-function: yas--auto-fill transient-mark-mode: t abbrev-mode: t Load-path shadows: /Users/aaronjensen/.emacs.d/elpa/26.0/org-bullets-20140918.1137/org-bullets hides /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-b= ullets /Users/aaronjensen/.emacs.d/elpa/26.0/ht-20161015.1945/ht hides /Users/aaronjensen/.emacs.d/core/libs/ht /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ox hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ox /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ox-texinfo hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ox-texinfo /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ox-publish hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ox-publish /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ox-org hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ox-org /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ox-odt hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ox-odt /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ox-md hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ox-md /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ox-man hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ox-man /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ox-latex hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ox-latex /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ox-icalenda= r hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ox-icalendar /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ox-html hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ox-html /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ox-beamer hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ox-beamer /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ox-ascii hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ox-ascii /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-w3m hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-w3m /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-version hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-version /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-timer hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-timer /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-table hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-table /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-src hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-src /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-rmail hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-rmail /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-protoco= l hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-protocol /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-plot hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-plot /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-pcomple= te hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-pcomplete /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-mouse hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-mouse /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-mobile hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-mobile /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-mhe hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-mhe /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-macs hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-macs /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-macro hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-macro /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-loaddef= s hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-loaddefs /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-list hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-list /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-irc hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-irc /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-install hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-install /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-inlinet= ask hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-inlinetask /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-info hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-info /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-indent hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-indent /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-id hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-id /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-habit hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-habit /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-gnus hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-gnus /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-footnot= e hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-footnote /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-feed hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-feed /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-faces hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-faces /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-eshell hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-eshell /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-entitie= s hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-entities /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-element hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-element /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-docview hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-docview /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-datetre= e hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-datetree /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-ctags hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-ctags /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-crypt hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-crypt /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-compat hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-compat /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-colview hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-colview /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-clock hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-clock /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-capture hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-capture /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-bibtex hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-bibtex /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-bbdb hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-bbdb /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-attach hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-attach /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-archive hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-archive /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/org-agenda hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/org-agenda /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-tangle hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-tangle /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-table hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-table /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-sqlite hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-sqlite /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-sql hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-sql /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-shen hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-shen /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-screen hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-screen /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-scheme hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-scheme /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-scala hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-scala /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-sass hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-sass /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-ruby hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-ruby /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-ref hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-ref /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-R hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-R /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-python hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-python /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-plantuml hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-plantuml /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-picolisp hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-picolisp /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-perl hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-perl /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-org hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-org /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-octave hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-octave /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-ocaml hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-ocaml /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-mscgen hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-mscgen /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-maxima hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-maxima /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-matlab hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-matlab /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-makefile hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-makefile /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-lob hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-lob /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-lisp hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-lisp /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-lilypond hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-lilypond /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-ledger hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-ledger /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-latex hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-latex /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-keys hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-keys /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-js hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-js /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-java hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-java /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-io hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-io /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-haskell hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-haskell /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-gnuplot hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-gnuplot /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-fortran hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-fortran /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-exp hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-exp /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-eval hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-eval /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-emacs-li= sp hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-emacs-lisp /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-dot hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-dot /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-ditaa hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-ditaa /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-css hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-css /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-core hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-core /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-comint hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-comint /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-clojure hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-clojure /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-calc hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-calc /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-C hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-C /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-awk hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-awk /Users/aaronjensen/.emacs.d/elpa/26.0/org-plus-contrib-20170502/ob-asymptot= e hides /usr/local/Cellar/emacs-plus/HEAD-52f7440/share/emacs/26.0.50/lisp/or= g/ob-asymptote Features: (shadow sort mail-extr emacsbug sendmail smex appt diary-lib diary-loaddefs auto-compile packed elisp-slime-nav eros evil-cleverparens evil-cleverparens-text-objects evil-cleverparens-util paredit flycheck-package package-lint finder nameless alchemist alchemist-macroexpand alchemist-company alchemist-help alchemist-complete alchemist-refcard alchemist-phoenix alchemist-compile alchemist-iex alchemist-message alchemist-hooks alchemist-hex alchemist-mix alchemist-info alchemist-goto alchemist-scope alchemist-eval alchemist-interact alchemist-server alchemist-execute alchemist-report alchemist-test-mode alchemist-project alchemist-file alchemist-key alchemist-utils smartparens-elixir flycheck-dialyxir flycheck-credo flycheck-dogma elixir-mode pkg-info epl elixir-smie goto-addr bug-reference auto-highlight-symbol highlight-numbers parent-mode highlight-parentheses hideshow rainbow-delimiters sh-script executable org-table pp vc-git org-gcal org-archive open-junk-file company-files company-keywords company-etags company-gtags company-template company-dabbrev-code company-dabbrev company-capf php-extras company org-eldoc evil-org ob-clojure ob-ruby ob-shell org-bullets org-download toc-org clojure-snippets yasnippet org-indent image-file org-rmail org-mhe org-irc org-info org-gnus org-docview doc-view org-bibtex bibtex org-bbdb org-w3m editorconfig-core editorconfig-core-handle editorconfig-fnmatch org-mobile-sync org-mobile org-agenda org-inlinetask ob-elixir ob-http ob-http-mode ob-restclient restclient ox-gfm ox-md ox-reveal ox-odt rng-loc rng-uri rng-parse rng-match rng-dt rng-util rng-pttrn nxml-parse nxml-ns nxml-enc xmltok nxml-util ox-latex ox-icalendar ox-html table ox-ascii ox-publish ox orgit org-element avl-tree git-rebase magit-gh-pulls gh gh-users gh-issues gh-pulls gh-repos gh-comments gh-gist gh-oauth gh-api logito gh-cache pcache eieio-base gh-auth gh-url evil-magit magit-obsolete magit-blame magit-stash magit-bisect magit-remote magit-commit magit-sequence magit-notes magit-worktree magit-branch magit-files magit-refs magit-status magit magit-repos magit-apply magit-wip magit-log magit-diff smerge-mode magit-core magit-autorevert magit-process magit-margin magit-mode magit-git magit-section magit-popup org org-macro org-footnote org-pcomplete org-list org-faces org-entities org-version ob-emacs-lisp ob ob-tangle org-src ob-ref ob-lob ob-table ob-keys ob-exp ob-comint ob-core ob-eval org-compat org-macs org-loaddefs cal-menu calendar cal-loaddefs request-deferred deferred request alert log4e notifications dbus xml gntp mwim cl-print colir network-stream starttls url-http tls gnutls url-gw nsm url-cache url-auth url url-proxy url-privacy url-expand url-methods url-history url-cookie url-domsuf url-util mailcap projectile grep compile recentf tree-widget flyspell ispell quiet-emacs fill-or-unfill company-simple-complete init-xclip init-typescript init-flyspell init-terminal-cursor evil-terminal-cursor-changer init-org init-magit evil-mc evil-mc-command-execute evil-mc-command-record evil-mc-cursor-make evil-mc-region evil-mc-cursor-state evil-mc-undo evil-mc-vars evil-mc-known-commands evil-mc-common hl-todo zone xterm-color spacemacs-whitespace-cleanup ws-butler winum winner window-purpose-x imenu-list imenu ibuf-ext ibuffer ibuffer-loaddefs volatile-highlights vi-tilde-fringe tmux string-inflection spacemacs-purpose-popwin window-purpose window-purpose-fixes window-purpose-prefix-overload window-purpose-switch let-alist window-purpose-layout window-purpose-core window-purpose-configuration window-purpose-utils spaceline-config spaceline-segments spaceline powerline powerline-separators color powerline-themes smartparens-config smartparens-ruby saveplace savehist ruby-test-mode pcre2el rxt re-builder ruby-mode smie popwin persp-mode osx-trash linum ivy-hydra info+ image-mode git-gutter-fringe+ fringe-helper git-gutter+ git-commit with-editor async-bytecomp async tramp-sh server magit-utils crm log-edit message puny dired dired-loaddefs rfc822 mml mml-sec epa epg gnus-util rmail rmail-loaddefs mailabbrev mail-utils gmm-utils mailheader pcvs-util add-log docker-tramp tramp-cache tramp tramp-compat tramp-loaddefs trampver shell drupal/pcomplete pcomplete comint ansi-color parse-time gh-common gh-profile marshal flycheck-flow flycheck find-func flx-ido eyebrowse evil-unimpaired f s evil-surround evil-search-highlight-persist evil-numbers evil-lisp-state smartparens dash evil-indent-plus evil-exchange evil-escape evil-args evil-anzu anzu cider-eval-sexp-fu eval-sexp-fu highlight editorconfig noutline outline dtrt-indent rx diff-hl vc-dir ewoc vc vc-dispatcher diff-mode counsel jka-compr esh-util etags xref project swiper ivy flx delsel ivy-overlay ffap clean-aindent-mode adaptive-wrap hybrid-mode exec-path-from-shell evil-evilified-state which-key use-package diminish bind-key hydra lv cus-edit cus-start cus-load evil evil-integration undo-tree diff evil-maps evil-commands evil-jumps evil-command-window evil-types evil-search evil-ex evil-macros evil-repeat evil-states evil-core evil-common windmove thingatpt rect evil-digraphs evil-vars ring info bind-map quelpa help-fns radix-tree package-build mm-decode mm-bodies mm-encode mail-parse rfc2231 rfc2047 rfc2045 mm-util ietf-drums mail-prsvr json map lisp-mnt hl-line xt-mouse autorevert filenotify cl-extra disp-table wid-edit monokai-theme format-spec finder-inf init-sass init-php init-html init-evil core-configuration-layer eieio-compat ht cl help-mode warnings package epg-config url-handlers url-parse auth-source cl-seq password-cache url-vars eieio eieio-core eieio-loaddefs ido-vertical-mode ido seq byte-opt bytecomp byte-compile cconv core-spacemacs core-use-package-ext core-transient-state core-micro-state core-toggle core-keybindings core-fonts-support core-spacemacs-buffer core-funcs cl-macs gv core-themes-support core-display-init core-jump core-release-management core-custom-settings core-dotspacemacs core-command-line pcase core-debug edmacro kmacro derived advice profiler easymenu cl-loaddefs cl-lib page-break-lines easy-mmode subr-x time-date tooltip eldoc electric uniquify ediff-hook vc-hooks lisp-float-type mwheel term/ns-win ns-win ucs-normalize mule-util term/common-win tool-bar dnd fontset image regexp-opt fringe tabulated-list replace newcomment text-mode elisp-mode lisp-mode prog-mode register page menu-bar rfn-eshadow isearch timer select scroll-bar mouse jit-lock font-lock syntax facemenu font-core term/tty-colors frame cl-generic cham georgian utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao korean japanese eucjp-ms cp51932 hebrew greek romanian slovak czech european ethiopic indian cyrillic chinese composite charscript charprop case-table epa-hook jka-cmpr-hook help simple abbrev obarray minibuffer cl-preloaded nadvice loaddefs button faces cus-face macroexp files text-properties overlay sha1 md5 base64 format env code-pages mule custom widget hashtable-print-readable backquote kqueue cocoa ns multi-tty make-network-process emacs) Memory information: ((conses 16 1234324 766669) (symbols 48 72939 2) (miscs 40 2095 4834) (strings 32 222406 407731) (string-bytes 1 7367064) (vectors 16 111766) (vector-slots 8 2307252 262704) (floats 8 558 2047) (intervals 56 38278 14013) (buffers 976 58)) From debbugs-submit-bounces@debbugs.gnu.org Mon May 08 15:04:49 2017 Received: (at 26835) by debbugs.gnu.org; 8 May 2017 19:04:49 +0000 Received: from localhost ([127.0.0.1]:60063 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d7nxh-00020w-Ei for submit@debbugs.gnu.org; Mon, 08 May 2017 15:04:49 -0400 Received: from eggs.gnu.org ([208.118.235.92]:56222) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d7nxf-00020k-LR for 26835@debbugs.gnu.org; Mon, 08 May 2017 15:04:47 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1d7nxV-0007Pc-KW for 26835@debbugs.gnu.org; Mon, 08 May 2017 15:04:42 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-0.0 required=5.0 tests=BAYES_40,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:56658) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1d7nxV-0007PY-ID; Mon, 08 May 2017 15:04:37 -0400 Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:2353 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1d7nxU-0000Gn-CY; Mon, 08 May 2017 15:04:37 -0400 Date: Mon, 08 May 2017 22:04:17 +0300 Message-Id: <8337cfcgr2.fsf@gnu.org> From: Eli Zaretskii To: Aaron Jensen In-reply-to: (message from Aaron Jensen on Mon, 8 May 2017 11:42:45 -0700) Subject: Re: bug#26835: 26.0.50; url-retrieve no longer raises certificate errors References: X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-Debbugs-Envelope-To: 26835 Cc: 26835@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Eli Zaretskii Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) > From: Aaron Jensen > Date: Mon, 8 May 2017 11:42:45 -0700 > > This post describes a method for configuring emacs to verify ssl > certificates: > https://glyph.twistedmatrix.com/2015/11/editor-malware.html > > It also contains a snippet to test that it is properly configured: > > (let ((bad-hosts > (loop for bad > in `("https://wrong.host.badssl.com/" > "https://self-signed.badssl.com/") > if (condition-case e > (url-retrieve > bad (lambda (retrieved) t)) > (error nil)) > collect bad))) > (if bad-hosts > (print (format "tls misconfigured; retrieved %s ok" > bad-hosts)) > (url-retrieve "https://badssl.com" > (lambda (retrieved) t)))) > > This snippet works fine in 25.2 but reports an error on master (26.0.50) > > As a simpler test, both: > > (url-retrieve "https://wrong.host.badssl.com/") > (url-retrieve-synchronously "https://wrong.host.badssl.com/") > > Should fail, but do not. I seem to be unable to reproduce any of the wrong behavior in the current master build. Could you please provide more details about what errors you see and what failures you expected, but didn't see? In my testing, Emacs asks me whether to continue connecting, when it discovers a bad certificate, and it's up to me to decide. Did it ask you, and if it did, what alternative did you select? Also, did you try all this in "emacs -Q"? It looks like you did this in a customized session (e.g., because in "emacs -Q" there's no 'loop' function, which the above snippet uses). So the problems could have something to do with your customizations. Thanks. From debbugs-submit-bounces@debbugs.gnu.org Mon May 08 15:45:01 2017 Received: (at 26835) by debbugs.gnu.org; 8 May 2017 19:45:01 +0000 Received: from localhost ([127.0.0.1]:60188 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d7oaa-000338-Vf for submit@debbugs.gnu.org; Mon, 08 May 2017 15:45:01 -0400 Received: from mail-yw0-f169.google.com ([209.85.161.169]:33119) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d7oaY-00032v-Tx for 26835@debbugs.gnu.org; Mon, 08 May 2017 15:44:59 -0400 Received: by mail-yw0-f169.google.com with SMTP id 203so34673372ywe.0 for <26835@debbugs.gnu.org>; Mon, 08 May 2017 12:44:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=9RVcsdM8wiFVgGknQnb8QmZgeFumwDlpZVAMLZHdw+M=; b=iOqfvBXAd1uZT+sehlanCWxAhsSXmpKNDMB75CRIkADG+6JTSkKAqucKgkWjnb56t+ ZxGi5yAaz7daurse+7bi5HlHl4fvuHeguedvDz48EW6Qy4IqpDdZQOJqO5JAd/ih+ORV GiIIVSfNvAgyC+LgomA2mfuPOD3ZMDrFnIm4bzF5Y7aUwJ6eTjCvcQes8NielK0h1FZT w0REPuIhL9liZgSSgS84uN/ephK8EZhWTnQcEF27vNlgKmixkCoBUaWGLQ/BhTdlQiLK jnx6KQewmW19VNNE25aNTmQ6Ogh919EVJAOZMsX6fbu66YD5aPAdhtBEWhIQxgEx6yVM ReaA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=9RVcsdM8wiFVgGknQnb8QmZgeFumwDlpZVAMLZHdw+M=; b=KlhhF1X8he0iD2Qnhx+njOsh54zF/c+v3bSDJUj08nfD2qAY6WP0RP1j3l02tFTR4R 8poXmyxl/MJwPdg8WXiMVwxiX0DeN0BwD5Klf/pm9vyvkkhU0tjsWS7JFGfkTcTQfSEC LJWEDiIBQnFXjMVwnmPdZWCMFIlPhLZ/k1sKvb0ES394wrXZpnsSLHK9W8A7K4mWgd0N jZQXr9xCEYC5875a/d89MVUIWUOq5L3q6Zbg6c3J4+FQy6+x9iOQfaTDPgZLC9hj6WeK XvV8Y5cbaiNH4923JeMO3WzMajnySr+f5cDqd0bMrjcVwZ7UbNVery1aPfDHqJjuKIkp xZMQ== X-Gm-Message-State: AODbwcAFRJsU/JLqH9JO8/j1TDmB5xrxbDlq54SyJF0G+m9jSeGYiRGz 5xQF0QEXlu3zcBOGC8ct3uaixHl65Q== X-Received: by 10.129.159.131 with SMTP id w125mr4996569ywg.210.1494272693089; Mon, 08 May 2017 12:44:53 -0700 (PDT) MIME-Version: 1.0 Received: by 10.37.17.6 with HTTP; Mon, 8 May 2017 12:44:52 -0700 (PDT) In-Reply-To: <8337cfcgr2.fsf@gnu.org> References: <8337cfcgr2.fsf@gnu.org> From: Aaron Jensen Date: Mon, 8 May 2017 12:44:52 -0700 Message-ID: Subject: Re: bug#26835: 26.0.50; url-retrieve no longer raises certificate errors To: Eli Zaretskii Content-Type: text/plain; charset=UTF-8 X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 26835 Cc: 26835@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) On Mon, May 8, 2017 at 12:04 PM, Eli Zaretskii wrote: >> From: Aaron Jensen >> Date: Mon, 8 May 2017 11:42:45 -0700 >> > I seem to be unable to reproduce any of the wrong behavior in the > current master build. Could you please provide more details about > what errors you see and what failures you expected, but didn't see? > > In my testing, Emacs asks me whether to continue connecting, when it > discovers a bad certificate, and it's up to me to decide. Did it ask > you, and if it did, what alternative did you select? > > Also, did you try all this in "emacs -Q"? It looks like you did this > in a customized session (e.g., because in "emacs -Q" there's no 'loop' > function, which the above snippet uses). So the problems could have > something to do with your customizations. It repros in `emacs -Q', just set: (setq gnutls-verify-error t) (url-retrieve-synchronously "https://wrong.host.badssl.com/") In Emacs 25.2, this causes an error to be thrown when you use url-retrieve, in 26, it silently proceeds. Also, I can confirm that if gnutls-verify-error is nil, it prompts as you described. I'll leave it as that for now in my config. From debbugs-submit-bounces@debbugs.gnu.org Mon May 08 16:15:50 2017 Received: (at control) by debbugs.gnu.org; 8 May 2017 20:15:50 +0000 Received: from localhost ([127.0.0.1]:60250 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d7p4Q-0005kz-4l for submit@debbugs.gnu.org; Mon, 08 May 2017 16:15:50 -0400 Received: from eggs.gnu.org ([208.118.235.92]:46630) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d7p4O-0005ki-MT for control@debbugs.gnu.org; Mon, 08 May 2017 16:15:48 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1d7p4J-0002Z5-0M for control@debbugs.gnu.org; Mon, 08 May 2017 16:15:43 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:57699) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1d7p4I-0002Z1-TV for control@debbugs.gnu.org; Mon, 08 May 2017 16:15:42 -0400 Received: from rgm by fencepost.gnu.org with local (Exim 4.82) (envelope-from ) id 1d7p4I-0001cS-JY for control@debbugs.gnu.org; Mon, 08 May 2017 16:15:42 -0400 Subject: control message for bug 26835 To: X-Mailer: mail (GNU Mailutils 2.99.98) Message-Id: From: Glenn Morris Date: Mon, 08 May 2017 16:15:42 -0400 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) tag 26835 security From debbugs-submit-bounces@debbugs.gnu.org Mon May 08 16:15:56 2017 Received: (at control) by debbugs.gnu.org; 8 May 2017 20:15:56 +0000 Received: from localhost ([127.0.0.1]:60254 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d7p4W-0005lL-BC for submit@debbugs.gnu.org; Mon, 08 May 2017 16:15:56 -0400 Received: from eggs.gnu.org ([208.118.235.92]:46643) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d7p4V-0005l1-A3 for control@debbugs.gnu.org; Mon, 08 May 2017 16:15:55 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1d7p4P-0002d8-Ih for control@debbugs.gnu.org; Mon, 08 May 2017 16:15:50 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:57704) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1d7p4P-0002cy-FY for control@debbugs.gnu.org; Mon, 08 May 2017 16:15:49 -0400 Received: from rgm by fencepost.gnu.org with local (Exim 4.82) (envelope-from ) id 1d7p4O-0001eG-6Y for control@debbugs.gnu.org; Mon, 08 May 2017 16:15:48 -0400 Subject: control message for bug 24655 To: X-Mailer: mail (GNU Mailutils 2.99.98) Message-Id: From: Glenn Morris Date: Mon, 08 May 2017 16:15:48 -0400 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) block 24655 by 26835 From debbugs-submit-bounces@debbugs.gnu.org Tue May 09 13:52:56 2017 Received: (at 26835) by debbugs.gnu.org; 9 May 2017 17:52:56 +0000 Received: from localhost ([127.0.0.1]:34420 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d89Jf-0001Po-Od for submit@debbugs.gnu.org; Tue, 09 May 2017 13:52:55 -0400 Received: from eggs.gnu.org ([208.118.235.92]:59289) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d89Je-0001Pa-30 for 26835@debbugs.gnu.org; Tue, 09 May 2017 13:52:54 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1d89JU-0002Ro-D7 for 26835@debbugs.gnu.org; Tue, 09 May 2017 13:52:48 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-0.0 required=5.0 tests=BAYES_20,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:44086) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1d89JU-0002Re-AV; Tue, 09 May 2017 13:52:44 -0400 Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:3544 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1d89JH-0003OL-Q6; Tue, 09 May 2017 13:52:43 -0400 Date: Tue, 09 May 2017 20:51:48 +0300 Message-Id: <83lgq5c40b.fsf@gnu.org> From: Eli Zaretskii To: Aaron Jensen , Lars Ingebrigtsen In-reply-to: (message from Aaron Jensen on Mon, 8 May 2017 12:44:52 -0700) Subject: Re: bug#26835: 26.0.50; url-retrieve no longer raises certificate errors References: <8337cfcgr2.fsf@gnu.org> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-Debbugs-Envelope-To: 26835 Cc: 26835@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Eli Zaretskii Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) [Resending, as I messed up the previous message. Apologies.] > From: Aaron Jensen > Date: Mon, 8 May 2017 12:44:52 -0700 > Cc: 26835@debbugs.gnu.org > > It repros in `emacs -Q', just set: > > (setq gnutls-verify-error t) > (url-retrieve-synchronously "https://wrong.host.badssl.com/") > > In Emacs 25.2, this causes an error to be thrown when you use > url-retrieve, in 26, it silently proceeds. That's because we now perform GnuTLS negotiation asynchronously, without blocking. When the certificate matching fails, gnutls.c faithfully stores the error message in the process's status by calling boot_error: boot_error (p, "The x509 certificate does not match \"%s\"", c_hostname); and boot_error does: static void ATTRIBUTE_FORMAT_PRINTF (2, 3) boot_error (struct Lisp_Process *p, const char *m, ...) { va_list ap; va_start (ap, m); if (p->is_non_blocking_client) pset_status (p, list2 (Qfailed, vformat_string (m, ap))); So the process status becomes the list (failed "error message"). But when url-retrieve-synchronously accesses the status, by calling process-status, we do this: status = p->status; if (CONSP (status)) status = XCAR (status); which loses the error message, leaving just 'failed'. So url-retrieve-synchronously silently exits, and doesn't even have the info that could cause it to signal an error. IOW, the problem is not that the connection proceeds -- it does not. The problem is that it fails silently without telling the caller what caused the failure. I'll CC Lars, who introduced the non-blocking connections. From debbugs-submit-bounces@debbugs.gnu.org Wed May 10 10:24:24 2017 Received: (at 26835) by debbugs.gnu.org; 10 May 2017 14:24:24 +0000 Received: from localhost ([127.0.0.1]:36848 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d8SXQ-0002y2-8O for submit@debbugs.gnu.org; Wed, 10 May 2017 10:24:24 -0400 Received: from hermes.netfonds.no ([80.91.224.195]:60517) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d8SXN-0002xs-Lc for 26835@debbugs.gnu.org; Wed, 10 May 2017 10:24:22 -0400 Received: from cm-84.209.243.26.getinternet.no ([84.209.243.26] helo=stories) by hermes.netfonds.no with esmtpsa (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from ) id 1d8SXG-0005ad-7k; Wed, 10 May 2017 16:24:16 +0200 From: Lars Ingebrigtsen To: Eli Zaretskii Subject: Re: bug#26835: 26.0.50; url-retrieve no longer raises certificate errors References: <8337cfcgr2.fsf@gnu.org> <83lgq5c40b.fsf@gnu.org> Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAD1BMVEXx8e2rqbJyXGbHxMiX lpuFfuCVAAACQklEQVQ4jXVT62HzMAjEnzyAiRigcTWAFDSAkdh/pu+w3bT9UeXhhNPxOID2Pw79 DRhnIkpKqTWBxccXILxRqsBqalkbrik1JU5NObtvbiAKnt64WSXhbsrmXTxTgtXdMpi0NvY43EDp ngEM/GPKYmGfNa77RrSIwG7UFi/ObgkxRRGmOXeXTFVln69xDOTEASQ3LQg+62ufA7mX8Ij864oo kyjXqGrsAyF9jHLQv+enGOpV3p/7KxgFxPJc+z7zCUjZ9xUA3HkpxfKa9r1SVi7nfQc+yu5eScNj uLoixyOe5rW3Ga6er+eZ0TgTC81qByD+iU8Afp8aRuqtO0SFg8hX8IIuq3eSrVvyX2fW7kp2iSvv L5AhFpNtkMyth/L9uuQsniDi7cis3uwzPuGN/gRhyFYudxQnpqDZA5YdmnnuX0C0YJXzJh/d+M0I znpltNDK82bUk2NIK5IBsKVTEzQ6zVaXqwhD07clK9rXE3VbYz7sTrM2zgeAlcR6pbcalTGGAXQa UzaSL2BTVQmgkUxO9BjXkPjUmnAxLUw+G4Di6NJAS7KKMYBMm2XS0GhEB6NZlkFjGKduZ1PH3Y0k NYMRg6qdHj8bi8HOCO5H11O7ixAqJfhHaVtG+f1NOAGkywt+lyPFXppavpRNJBVNJD2EGQVUvYGz H8lf5QNlDHtiBCp9n5Y0YbRlwwb/ArDlqSHEsbpAoG9IsWWsbvMRVYaI97Hm46jYHAz+ME1vIFZ5 kuRa7Tl+xkBmFeuAYHvhG/gPywKsGKvkrtwAAAAASUVORK5CYII= Date: Wed, 10 May 2017 16:24:13 +0200 In-Reply-To: <83lgq5c40b.fsf@gnu.org> (Eli Zaretskii's message of "Tue, 09 May 2017 20:51:48 +0300") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 26835 Cc: 26835@debbugs.gnu.org, Aaron Jensen X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) Eli Zaretskii writes: >> It repros in `emacs -Q', just set: >> >> (setq gnutls-verify-error t) >> (url-retrieve-synchronously "https://wrong.host.badssl.com/") >> >> In Emacs 25.2, this causes an error to be thrown when you use >> url-retrieve, in 26, it silently proceeds. > > That's because we now perform GnuTLS negotiation asynchronously, > without blocking. (As an aside, perhaps url-retrieve-synchronously should be opening the socket with :nowait nil?) > status = p->status; > if (CONSP (status)) > status = XCAR (status); > > which loses the error message, leaving just 'failed'. So > url-retrieve-synchronously silently exits, and doesn't even have the > info that could cause it to signal an error. > > IOW, the problem is not that the connection proceeds -- it does not. > The problem is that it fails silently without telling the caller what > caused the failure. > > I'll CC Lars, who introduced the non-blocking connections. Good analysis. I'll try to have a look at this soonish (and make it report the error properly) unless somebody else beats me to it. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no From debbugs-submit-bounces@debbugs.gnu.org Wed May 10 12:49:03 2017 Received: (at 26835) by debbugs.gnu.org; 10 May 2017 16:49:03 +0000 Received: from localhost ([127.0.0.1]:36960 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d8UnL-0006Hm-ON for submit@debbugs.gnu.org; Wed, 10 May 2017 12:49:03 -0400 Received: from eggs.gnu.org ([208.118.235.92]:46252) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d8UnH-0006HX-Of for 26835@debbugs.gnu.org; Wed, 10 May 2017 12:48:59 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1d8Un8-000608-5h for 26835@debbugs.gnu.org; Wed, 10 May 2017 12:48:50 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-0.5 required=5.0 tests=BAYES_05,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:34387) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1d8Un8-000604-2L; Wed, 10 May 2017 12:48:46 -0400 Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:4461 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1d8Un7-0002XQ-9f; Wed, 10 May 2017 12:48:45 -0400 Date: Wed, 10 May 2017 19:48:32 +0300 Message-Id: <83ziekac9r.fsf@gnu.org> From: Eli Zaretskii To: Lars Ingebrigtsen In-reply-to: (message from Lars Ingebrigtsen on Wed, 10 May 2017 16:24:13 +0200) Subject: Re: bug#26835: 26.0.50; url-retrieve no longer raises certificate errors References: <8337cfcgr2.fsf@gnu.org> <83lgq5c40b.fsf@gnu.org> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-Debbugs-Envelope-To: 26835 Cc: 26835@debbugs.gnu.org, aaronjensen@gmail.com X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Eli Zaretskii Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) > From: Lars Ingebrigtsen > Cc: Aaron Jensen , 26835@debbugs.gnu.org > Date: Wed, 10 May 2017 16:24:13 +0200 > > >> (setq gnutls-verify-error t) > >> (url-retrieve-synchronously "https://wrong.host.badssl.com/") > >> > >> In Emacs 25.2, this causes an error to be thrown when you use > >> url-retrieve, in 26, it silently proceeds. > > > > That's because we now perform GnuTLS negotiation asynchronously, > > without blocking. > > (As an aside, perhaps url-retrieve-synchronously should be opening the > socket with :nowait nil?) Yes, I had a similar thought while I was reading the code. > Good analysis. I'll try to have a look at this soonish (and make it > report the error properly) unless somebody else beats me to it. Thanks. From debbugs-submit-bounces@debbugs.gnu.org Sat Sep 02 09:43:20 2017 Received: (at 26835) by debbugs.gnu.org; 2 Sep 2017 13:43:21 +0000 Received: from localhost ([127.0.0.1]:41921 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1do8hi-0006yI-Ew for submit@debbugs.gnu.org; Sat, 02 Sep 2017 09:43:20 -0400 Received: from eggs.gnu.org ([208.118.235.92]:51224) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1do8he-0006xz-AM for 26835@debbugs.gnu.org; Sat, 02 Sep 2017 09:43:17 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1do8hU-0004NX-9M for 26835@debbugs.gnu.org; Sat, 02 Sep 2017 09:43:09 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:49849) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1do8hN-00046U-3o; Sat, 02 Sep 2017 09:42:57 -0400 Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:2198 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1do8hM-0004RY-8N; Sat, 02 Sep 2017 09:42:56 -0400 Date: Sat, 02 Sep 2017 16:42:44 +0300 Message-Id: <838thxz06j.fsf@gnu.org> From: Eli Zaretskii To: larsi@gnus.org In-reply-to: <83ziekac9r.fsf@gnu.org> (message from Eli Zaretskii on Wed, 10 May 2017 19:48:32 +0300) Subject: Re: bug#26835: 26.0.50; url-retrieve no longer raises certificate errors References: <8337cfcgr2.fsf@gnu.org> <83lgq5c40b.fsf@gnu.org> <83ziekac9r.fsf@gnu.org> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-Debbugs-Envelope-To: 26835 Cc: 26835@debbugs.gnu.org, aaronjensen@gmail.com X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Eli Zaretskii Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) > Date: Wed, 10 May 2017 19:48:32 +0300 > From: Eli Zaretskii > Cc: 26835@debbugs.gnu.org, aaronjensen@gmail.com > > > From: Lars Ingebrigtsen > > Cc: Aaron Jensen , 26835@debbugs.gnu.org > > Date: Wed, 10 May 2017 16:24:13 +0200 > > > > >> (setq gnutls-verify-error t) > > >> (url-retrieve-synchronously "https://wrong.host.badssl.com/") > > >> > > >> In Emacs 25.2, this causes an error to be thrown when you use > > >> url-retrieve, in 26, it silently proceeds. > > > > > > That's because we now perform GnuTLS negotiation asynchronously, > > > without blocking. > > > > (As an aside, perhaps url-retrieve-synchronously should be opening the > > socket with :nowait nil?) > > Yes, I had a similar thought while I was reading the code. > > > Good analysis. I'll try to have a look at this soonish (and make it > > report the error properly) unless somebody else beats me to it. > > Thanks. Ping! Lars, any news on this issue? From debbugs-submit-bounces@debbugs.gnu.org Wed Sep 13 13:51:37 2017 Received: (at 26835) by debbugs.gnu.org; 13 Sep 2017 17:51:38 +0000 Received: from localhost ([127.0.0.1]:38677 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dsBp3-0003Mh-MW for submit@debbugs.gnu.org; Wed, 13 Sep 2017 13:51:37 -0400 Received: from hermes.netfonds.no ([80.91.224.195]:56364) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dsBoz-0003MY-SP for 26835@debbugs.gnu.org; Wed, 13 Sep 2017 13:51:34 -0400 Received: from cm-84.209.243.26.getinternet.no ([84.209.243.26] helo=mouse) by hermes.netfonds.no with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1dsBow-0005Pq-Uf; Wed, 13 Sep 2017 19:51:32 +0200 From: Lars Ingebrigtsen To: Eli Zaretskii Subject: Re: bug#26835: 26.0.50; url-retrieve no longer raises certificate errors References: <8337cfcgr2.fsf@gnu.org> <83lgq5c40b.fsf@gnu.org> <83ziekac9r.fsf@gnu.org> Date: Wed, 13 Sep 2017 19:51:30 +0200 In-Reply-To: <83ziekac9r.fsf@gnu.org> (Eli Zaretskii's message of "Wed, 10 May 2017 19:48:32 +0300") Message-ID: <87a81y7ahp.fsf@mouse.gnus.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 26835 Cc: 26835@debbugs.gnu.org, aaronjensen@gmail.com X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) Eli Zaretskii writes: >> (As an aside, perhaps url-retrieve-synchronously should be opening the >> socket with :nowait nil?) > > Yes, I had a similar thought while I was reading the code. And if we have :nowait nil in that case, then the error will be thrown as advertised. So I think I'll just make that change... somehow. (The URL code is, er, funny.) -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no From debbugs-submit-bounces@debbugs.gnu.org Wed Sep 13 14:11:19 2017 Received: (at 26835-done) by debbugs.gnu.org; 13 Sep 2017 18:11:19 +0000 Received: from localhost ([127.0.0.1]:38708 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dsC87-0003pH-O4 for submit@debbugs.gnu.org; Wed, 13 Sep 2017 14:11:19 -0400 Received: from hermes.netfonds.no ([80.91.224.195]:56605) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dsC86-0003pA-Pg for 26835-done@debbugs.gnu.org; Wed, 13 Sep 2017 14:11:19 -0400 Received: from cm-84.209.243.26.getinternet.no ([84.209.243.26] helo=mouse) by hermes.netfonds.no with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1dsC84-0001Wt-30; Wed, 13 Sep 2017 20:11:17 +0200 From: Lars Ingebrigtsen To: Eli Zaretskii Subject: Re: bug#26835: 26.0.50; url-retrieve no longer raises certificate errors References: <8337cfcgr2.fsf@gnu.org> <83lgq5c40b.fsf@gnu.org> <83ziekac9r.fsf@gnu.org> <838thxz06j.fsf@gnu.org> Date: Wed, 13 Sep 2017 20:11:15 +0200 In-Reply-To: <838thxz06j.fsf@gnu.org> (Eli Zaretskii's message of "Sat, 02 Sep 2017 16:42:44 +0300") Message-ID: <87o9qeeaf0.fsf@mouse.gnus.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 26835-done Cc: 26835-done@debbugs.gnu.org, aaronjensen@gmail.com X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) This should now be fixed. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no From debbugs-submit-bounces@debbugs.gnu.org Wed Sep 13 14:44:51 2017 Received: (at 26835) by debbugs.gnu.org; 13 Sep 2017 18:44:51 +0000 Received: from localhost ([127.0.0.1]:38785 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dsCeW-0006W1-35 for submit@debbugs.gnu.org; Wed, 13 Sep 2017 14:44:51 -0400 Received: from eggs.gnu.org ([208.118.235.92]:56083) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dsCeQ-0006Vi-QZ for 26835@debbugs.gnu.org; Wed, 13 Sep 2017 14:44:46 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dsCeH-0006xT-L4 for 26835@debbugs.gnu.org; Wed, 13 Sep 2017 14:44:37 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:54167) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dsCeB-0006sZ-3a; Wed, 13 Sep 2017 14:44:27 -0400 Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:3785 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1dsCe8-00011L-Gw; Wed, 13 Sep 2017 14:44:26 -0400 Date: Wed, 13 Sep 2017 21:44:05 +0300 Message-Id: <83ingmo2ve.fsf@gnu.org> From: Eli Zaretskii To: Lars Ingebrigtsen In-reply-to: <87o9qeeaf0.fsf@mouse.gnus.org> (message from Lars Ingebrigtsen on Wed, 13 Sep 2017 20:11:15 +0200) Subject: Re: bug#26835: 26.0.50; url-retrieve no longer raises certificate errors References: <8337cfcgr2.fsf@gnu.org> <83lgq5c40b.fsf@gnu.org> <83ziekac9r.fsf@gnu.org> <838thxz06j.fsf@gnu.org> <87o9qeeaf0.fsf@mouse.gnus.org> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-Debbugs-Envelope-To: 26835 Cc: 26835@debbugs.gnu.org, aaronjensen@gmail.com X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Eli Zaretskii Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) > From: Lars Ingebrigtsen > Cc: 26835-done@debbugs.gnu.org, aaronjensen@gmail.com > Date: Wed, 13 Sep 2017 20:11:15 +0200 > > This should now be fixed. Thanks! From unknown Tue Jun 24 17:23:46 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Thu, 12 Oct 2017 11:24:04 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator