From unknown Fri Aug 15 17:20:23 2025 X-Loop: help-debbugs@gnu.org Subject: bug#28603: 25.3; Certificate authority on macOS is empty Resent-From: Mark Ferlatte Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 26 Sep 2017 05:18:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 28603 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: 28603@debbugs.gnu.org X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.15064030221535 (code B ref -1); Tue, 26 Sep 2017 05:18:01 +0000 Received: (at submit) by debbugs.gnu.org; 26 Sep 2017 05:17:02 +0000 Received: from localhost ([127.0.0.1]:59460 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dwiEv-0000OV-EG for submit@debbugs.gnu.org; Tue, 26 Sep 2017 01:17:02 -0400 Received: from eggs.gnu.org ([208.118.235.92]:33092) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dwi3G-0008Qn-Eq for submit@debbugs.gnu.org; Tue, 26 Sep 2017 01:04:58 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dwi39-000664-Nm for submit@debbugs.gnu.org; Tue, 26 Sep 2017 01:04:53 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,T_DKIM_INVALID autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:41775) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1dwi39-000660-KQ for submit@debbugs.gnu.org; Tue, 26 Sep 2017 01:04:51 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:52291) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dwi38-0007zB-0g for bug-gnu-emacs@gnu.org; Tue, 26 Sep 2017 01:04:51 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dwi34-00062n-Pq for bug-gnu-emacs@gnu.org; Tue, 26 Sep 2017 01:04:49 -0400 Received: from mail-pg0-x22a.google.com ([2607:f8b0:400e:c05::22a]:51691) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dwi34-00061T-FO for bug-gnu-emacs@gnu.org; Tue, 26 Sep 2017 01:04:46 -0400 Received: by mail-pg0-x22a.google.com with SMTP id k193so5316893pgc.8 for ; Mon, 25 Sep 2017 22:04:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cryptio.net; s=google; h=from:content-transfer-encoding:mime-version:subject:message-id:date :to; bh=VcmQUat3ykigZXibfJzpqPVf7/blGdrjNbSb8LaRosU=; b=AUdG3lLqaxFnk2m1GFz6bo9Y5qKU4QrBCyWtAoITkt6PKwMoZ1E0FoqXXVW+fsIs2c HRCTUpXyXHLXaj5bkFUO1nnzjJc5ONkoIqVuPiSdsqJEB6/RNtIxW52MALI/ofBHjqlp uCx3Hl0K6mia/4z8zlVTSD8TeLFdsq/hHqsQQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:content-transfer-encoding:mime-version :subject:message-id:date:to; bh=VcmQUat3ykigZXibfJzpqPVf7/blGdrjNbSb8LaRosU=; b=kJAyEOmUdURhspy3fyNJpBnQuTbtyepp5NHgwr2o8r9VBTjgyp/gZqos9E1Lq2GhHE LaaPu5zZCqrT7hEhzWd+8IAEgb5Sx+2xSK+PhHtY8BSaXEvttlgudGZHpvm96DdY1MbM 9fDOHtNClPTbmixGI/B+D29oHp0gSZokQQm/Fa+7rLzKrJ56jlUhptKR+GyegxVaKqLq dnYHb7m79w8nQEbCigzFHyncqLZTFEO63FKxCzQkYlClZza/3dRYH1k6M7m7iJ4gUNtu 8Yk1w+a9SEiOGS9gEIRJmpXSh/+W4Znp7CC9n1+PeJsSxnovqLcNNeHU6i2a2JieGeEc zK1w== X-Gm-Message-State: AHPjjUh8DC5XcuNsSghZtdmsd3qfsAxjMKhzgLfi7BmPVJXzrtgyMykR 6dhHI+vShPVR6gRn5RfZRps/zalNSKU= X-Google-Smtp-Source: AOwi7QASxoLUvQbWpTLh/xtvDFkfSWtkx06rLZL9bX0Ct7oJQjKSWBjlCDqEBesJMxCiJZi+GKP1cg== X-Received: by 10.84.246.203 with SMTP id j11mr9840637plt.312.1506402282885; Mon, 25 Sep 2017 22:04:42 -0700 (PDT) Received: from [192.168.242.5] (c-24-4-93-209.hsd1.ca.comcast.net. [24.4.93.209]) by smtp.gmail.com with ESMTPSA id d186sm12715648pfd.117.2017.09.25.22.04.40 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 25 Sep 2017 22:04:40 -0700 (PDT) From: Mark Ferlatte Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.0 \(3445.1.6\)) Message-Id: Date: Mon, 25 Sep 2017 22:04:39 -0700 X-Mailer: Apple Mail (2.3445.1.6) X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.0 (----) X-Mailman-Approved-At: Tue, 26 Sep 2017 01:17:00 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.0 (----) When running (package-refresh-contents) on macOS, MELPA returns a TLS error. This ended up being due to gnutls-trustfiles not having a working default entry for macOS. Adding /etc/ssl/cert.pem to gnutls-trustfiles resolves the issue. I believe that adding that to the default settings in lisp/net/gnutls.el would be a helpful change. In GNU Emacs 25.3.1 (x86_64-apple-darwin13.4.0, NS appkit-1265.21 = Version 10.9.5 (Build 13F1911)) of 2017-09-12 built on builder10-9.local Windowing system distributor 'Apple', version 10.3.1561 Configured using: 'configure --with-ns '--enable-locallisppath=3D/Library/Application Support/Emacs/${version}/site-lisp:/Library/Application Support/Emacs/site-lisp' --with-modules' Configured features: NOTIFY ACL GNUTLS LIBXML2 ZLIB TOOLKIT_SCROLL_BARS NS MODULES Important settings: value of $LANG: en_US.UTF-8 locale-coding-system: utf-8-unix Major mode: EL Minor modes in effect: rainbow-mode: t rainbow-delimiters-mode: t elisp-slime-nav-mode: t guru-mode: t TeX-PDF-mode: t global-flycheck-mode: t flycheck-mode: t which-function-mode: t global-company-mode: t company-mode: t flx-ido-mode: t ido-ubiquitous-mode: t editorconfig-mode: t global-diff-hl-mode: t diff-auto-refine-mode: t winner-mode: t global-undo-tree-mode: t undo-tree-mode: t whitespace-mode: t global-anzu-mode: t anzu-mode: t projectile-mode: t flyspell-mode: t volatile-highlights-mode: t global-hl-line-mode: t recentf-mode: t savehist-mode: t save-place-mode: t show-smartparens-global-mode: t show-smartparens-mode: t smartparens-strict-mode: t smartparens-mode: t global-auto-revert-mode: t delete-selection-mode: t prelude-global-mode: t prelude-mode: t shell-dirtrack-mode: t which-key-mode: t beacon-mode: t tooltip-mode: t global-eldoc-mode: t eldoc-mode: t electric-indent-mode: t mouse-wheel-mode: t menu-bar-mode: t file-name-shadow-mode: t global-font-lock-mode: t font-lock-mode: t auto-composition-mode: t auto-encryption-mode: t auto-compression-mode: t size-indication-mode: t column-number-mode: t line-number-mode: t transient-mark-mode: t Recent messages: Loading /Users/ferlatte/.emacs.d/savefile/recentf...done Loading Prelude=E2=80=99s modules... Loading /Users/ferlatte/.emacs.d/prelude-modules.el (source)...done Loading personal configuration files in = /Users/ferlatte/.emacs.d/personal... Loading /Users/ferlatte/.emacs.d/personal/custom.el (source)...done Loading /Users/ferlatte/.emacs.d/personal/init.el (source)...done Prelude is ready to do thy bidding, Master ferlatte! Starting new Ispell process aspell with default dictionary... For information about GNU Emacs and the GNU system, type C-h C-a. Prelude tip: Press to search in GitHub. Load-path shadows: /Users/ferlatte/.emacs.d/elpa/seq-20151028.759/seq hides = /Applications/Emacs.app/Contents/Resources/lisp/emacs-lisp/seq /Users/ferlatte/.emacs.d/elpa/let-alist-1.0.5/let-alist hides = /Applications/Emacs.app/Contents/Resources/lisp/emacs-lisp/let-alist Features: (shadow sort editorconfig-core editorconfig-core-handle editorconfig-fnmatch mail-extr emacsbug message rfc822 mml mml-sec epg mm-decode mm-bodies mm-encode mail-parse rfc2231 mailabbrev gmm-utils mailheader sendmail rfc2047 rfc2045 ietf-drums mail-utils company-anaconda anaconda-mode pythonic f python-el-fgallina-expansions smartparens-python python tramp-sh rainbow-mode rainbow-delimiters elisp-slime-nav guru-mode init server prelude-yaml prelude-xml nxml-mode-expansions rng-nxml rng-valid rng-loc rng-uri rng-parse nxml-parse rng-match rng-dt rng-util rng-pttrn nxml-ns nxml-mode nxml-outln nxml-rap nxml-util nxml-glyph nxml-enc xmltok prelude-scss prelude-shell sh-script smie executable prelude-scheme geiser prelude-ruby prelude-python prelude-perl prelude-org prelude-latex company-auctex yasnippet latex-mode-expansions latex tex-ispell tex-style tex crm smartparens-latex prelude-js js2-mode-expansions js2-mode js-mode-expansions smartparens-javascript js html-mode-expansions smartparens-html sgml-mode cc-mode-expansions cc-mode cc-fonts cc-guess cc-menus cc-cmds cc-styles cc-align cc-engine cc-vars cc-defs prelude-go go-projectile vc-git go-rename go-guru go-eldoc go-mode url url-proxy url-privacy url-expand url-methods url-history url-cookie url-domsuf url-util mailcap find-file ffap prelude-emacs-lisp prelude-css prelude-common-lisp prelude-lisp prelude-c prelude-programming flycheck find-func subr-x which-func prelude-company company-oddmuse company-keywords company-etags company-gtags company-dabbrev-code company-dabbrev company-files company-capf company-cmake company-xcode company-clang company-semantic company-eclim company-template company-css company-nxml company-bbdb company prelude-ido smex flx-ido flx ido-completing-read+ memoize cus-edit cus-start cus-load prelude-osx exec-path-from-shell prelude-global-keybindings prelude-editor editorconfig operate-on-number calc-bin calc-ext calc calc-loaddefs calc-macs diff-hl smartrep vc-dir ewoc vc vc-dispatcher diff-mode easy-mmode winner undo-tree diff esh-var esh-io esh-cmd esh-opt esh-ext esh-proc esh-arg esh-groups eshell esh-module esh-mode esh-util re-builder whitespace tabify browse-kill-ring derived midnight ediff-merg ediff-wind ediff-diff ediff-mult ediff-help ediff-init ediff-util ediff dired-x dired anzu avy projectile grep compile ibuf-ext ibuffer bookmark pp expand-region text-mode-expansions er-basic-expansions expand-region-core expand-region-custom flyspell ispell rect etags xref project volatile-highlights hl-line windmove recentf tree-widget wid-edit savehist saveplace diminish edmacro kmacro smartparens-config smartparens autorevert filenotify delsel prelude-mode crux ido tramp tramp-compat tramp-loaddefs trampver shell pcomplete comint ansi-color ring format-spec imenu-anywhere imenu prelude-core epl ov thingatpt prelude-ui which-key beacon smart-mode-line advice rich-minority solarized-light-theme solarized color prelude-custom prelude-packages cl finder-inf tex-site gh-common gh-profile url-parse auth-source gnus-util mm-util help-fns mail-prsvr password-cache url-vars s marshal eieio-compat cl-seq ht json map dash eieio eieio-core cl-macs rx slime-autoloads info package epg-config seq byte-opt gv bytecomp byte-compile cl-extra help-mode easymenu cconv cl-loaddefs pcase cl-lib time-date mule-util tooltip eldoc electric uniquify ediff-hook vc-hooks lisp-float-type mwheel ns-win ucs-normalize term/common-win tool-bar dnd fontset image regexp-opt fringe tabulated-list newcomment elisp-mode lisp-mode prog-mode register page menu-bar rfn-eshadow timer select scroll-bar mouse jit-lock font-lock syntax facemenu font-core frame cl-generic cham georgian utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao korean japanese eucjp-ms cp51932 hebrew greek romanian slovak czech european ethiopic indian cyrillic chinese charscript case-table epa-hook jka-cmpr-hook help simple abbrev minibuffer cl-preloaded nadvice loaddefs button faces cus-face macroexp files text-properties overlay sha1 md5 base64 format env code-pages mule custom widget hashtable-print-readable backquote kqueue cocoa ns multi-tty make-network-process emacs) Memory information: ((conses 16 764186 258064) (symbols 48 57619 1) (miscs 40 94 379) (strings 32 139301 211185) (string-bytes 1 4110652) (vectors 16 104184) (vector-slots 8 2083378 366691) (floats 8 9271 8712) (intervals 56 1092 443) (buffers 976 17)) From debbugs-submit-bounces@debbugs.gnu.org Tue Sep 26 11:43:40 2017 Received: (at control) by debbugs.gnu.org; 26 Sep 2017 15:43:40 +0000 Received: from localhost ([127.0.0.1]:33383 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dws1M-0006CU-Do for submit@debbugs.gnu.org; Tue, 26 Sep 2017 11:43:40 -0400 Received: from eggs.gnu.org ([208.118.235.92]:41735) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dws1L-0006CH-EU for control@debbugs.gnu.org; Tue, 26 Sep 2017 11:43:39 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dws1F-0001oT-OU for control@debbugs.gnu.org; Tue, 26 Sep 2017 11:43:34 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:33715) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dws1F-0001oP-L3 for control@debbugs.gnu.org; Tue, 26 Sep 2017 11:43:33 -0400 Received: from rgm by fencepost.gnu.org with local (Exim 4.82) (envelope-from ) id 1dws1F-0005Og-Ct for control@debbugs.gnu.org; Tue, 26 Sep 2017 11:43:33 -0400 Subject: control message for bug 24396 To: X-Mailer: mail (GNU Mailutils 2.99.98) Message-Id: From: Glenn Morris Date: Tue, 26 Sep 2017 11:43:33 -0400 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) merge 28603 24396 From unknown Fri Aug 15 17:20:23 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: Mark Ferlatte Subject: bug#28603: closed (Re: bug#28603: 25.3; Certificate authority on macOS is empty) Message-ID: References: <87d13nbjbo.fsf@lifelogs.com> X-Gnu-PR-Message: they-closed 28603 X-Gnu-PR-Package: emacs X-Gnu-PR-Keywords: security Reply-To: 28603@debbugs.gnu.org Date: Sat, 09 Dec 2017 22:58:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1512860282-24480-1" This is a multi-part message in MIME format... ------------=_1512860282-24480-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #28603: 25.3; Certificate authority on macOS is empty which was filed against the emacs package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 28603@debbugs.gnu.org. --=20 28603: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D28603 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1512860282-24480-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 28603-done) by debbugs.gnu.org; 9 Dec 2017 22:57:57 +0000 Received: from localhost ([127.0.0.1]:54280 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eNo4C-0006MY-PX for submit@debbugs.gnu.org; Sat, 09 Dec 2017 17:57:56 -0500 Received: from mail-qk0-f177.google.com ([209.85.220.177]:37427) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eNo4A-0006MK-Sy for 28603-done@debbugs.gnu.org; Sat, 09 Dec 2017 17:57:55 -0500 Received: by mail-qk0-f177.google.com with SMTP id i130so3018947qke.4 for <28603-done@debbugs.gnu.org>; Sat, 09 Dec 2017 14:57:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lifelogs.com; s=google; h=from:to:cc:subject:organization:references:mail-copies-to:date :in-reply-to:message-id:user-agent:mime-version; bh=0+EY3/j5NzV01yXcUarcLPDpxz42QF1srVfUSEhfFXw=; b=tdhNZNBcQjsnuV7gjTYaCfEdICWtrmMDHoXV2l/wt5dxzUN9zD+xrA2WR1sOTSyhpn dZABAHoeSOmkUWa0Wx+y+8/BA15sK0vcQmwUXlaLyLiwd8eFCL0C6kZKxi1+SwM9pBd/ MZycZCMI+MA91mpWHOlHkau2ajXERKDvHhM68= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:organization:references :mail-copies-to:date:in-reply-to:message-id:user-agent:mime-version; bh=0+EY3/j5NzV01yXcUarcLPDpxz42QF1srVfUSEhfFXw=; b=HC6G6bf+vB69J+VgJtao+2A1vDomZAXtMBsNjQWSbG4zlI7TZrd1NjlJxu60eHkxv8 KvMDW+VddDRtmGYDOfFHvTGYy7H7KrtAb7P4+cAkbNImtqv/J0Ou685Gk91VDoUm/KG7 9i7YdFUnSiw1pkB+Yk9n392tIvP5zJlXUwebZKKe5LTluEe57zheqzuTZjLjkGu2H/CC QD3qygMtP7fG1+xNBFvnUg2xVPePYMfYraezY6viRu/i7ebjIFsg/i4QvbOGRgyurvnw UoU22fUG9DJUorHqO8UKuF929/9l4N65ie1yw0L1d4qOTsmzG4KHOlxSoXeyMCCXrOrw vQqw== X-Gm-Message-State: AKGB3mJP6PH3AzYCPHQEBESwhsuQE3kqDbxsy6BkZN5hybYfcV1zT+EF lZPcMZLQUS1pxLr1cxyeNXzZbq37skc= X-Google-Smtp-Source: ACJfBouCWD1tPBkmCemqYny7LZvH2zSSKpoe0KUYGv+XgcqCySxACufnhefYoRIt2YwuoVEMQm5ETA== X-Received: by 10.55.120.7 with SMTP id t7mr14071902qkc.283.1512860268860; Sat, 09 Dec 2017 14:57:48 -0800 (PST) Received: from flea (c-76-28-41-155.hsd1.ma.comcast.net. [76.28.41.155]) by smtp.gmail.com with ESMTPSA id e70sm2243872qka.83.2017.12.09.14.57.48 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Sat, 09 Dec 2017 14:57:48 -0800 (PST) From: Ted Zlatanov To: Mark Ferlatte Subject: Re: bug#28603: 25.3; Certificate authority on macOS is empty Organization: =?utf-8?B?0KLQtdC+0LTQvtGAINCX0LvQsNGC0LDQvdC+0LI=?= @ Cienfuegos References: X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Copies-To: never Date: Sat, 09 Dec 2017 17:57:47 -0500 In-Reply-To: (Mark Ferlatte's message of "Mon, 25 Sep 2017 22:04:39 -0700") Message-ID: <87d13nbjbo.fsf@lifelogs.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 28603-done Cc: 28603-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) On Mon, 25 Sep 2017 22:04:39 -0700 Mark Ferlatte wrote: MF> When running (package-refresh-contents) on macOS, MELPA returns a TLS MF> error. This ended up being due to gnutls-trustfiles not having a working MF> default entry for macOS. Adding /etc/ssl/cert.pem to gnutls-trustfiles MF> resolves the issue. MF> I believe that adding that to the default settings in lisp/net/gnutls.el MF> would be a helpful change. Thanks for the suggestion. This is done on the emacs-26 branch as a bugfix and will be merged into master later. Ted ------------=_1512860282-24480-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 26 Sep 2017 05:17:02 +0000 Received: from localhost ([127.0.0.1]:59460 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dwiEv-0000OV-EG for submit@debbugs.gnu.org; Tue, 26 Sep 2017 01:17:02 -0400 Received: from eggs.gnu.org ([208.118.235.92]:33092) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dwi3G-0008Qn-Eq for submit@debbugs.gnu.org; Tue, 26 Sep 2017 01:04:58 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dwi39-000664-Nm for submit@debbugs.gnu.org; Tue, 26 Sep 2017 01:04:53 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,T_DKIM_INVALID autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:41775) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1dwi39-000660-KQ for submit@debbugs.gnu.org; Tue, 26 Sep 2017 01:04:51 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:52291) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dwi38-0007zB-0g for bug-gnu-emacs@gnu.org; Tue, 26 Sep 2017 01:04:51 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dwi34-00062n-Pq for bug-gnu-emacs@gnu.org; Tue, 26 Sep 2017 01:04:49 -0400 Received: from mail-pg0-x22a.google.com ([2607:f8b0:400e:c05::22a]:51691) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dwi34-00061T-FO for bug-gnu-emacs@gnu.org; Tue, 26 Sep 2017 01:04:46 -0400 Received: by mail-pg0-x22a.google.com with SMTP id k193so5316893pgc.8 for ; Mon, 25 Sep 2017 22:04:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cryptio.net; s=google; h=from:content-transfer-encoding:mime-version:subject:message-id:date :to; bh=VcmQUat3ykigZXibfJzpqPVf7/blGdrjNbSb8LaRosU=; b=AUdG3lLqaxFnk2m1GFz6bo9Y5qKU4QrBCyWtAoITkt6PKwMoZ1E0FoqXXVW+fsIs2c HRCTUpXyXHLXaj5bkFUO1nnzjJc5ONkoIqVuPiSdsqJEB6/RNtIxW52MALI/ofBHjqlp uCx3Hl0K6mia/4z8zlVTSD8TeLFdsq/hHqsQQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:content-transfer-encoding:mime-version :subject:message-id:date:to; bh=VcmQUat3ykigZXibfJzpqPVf7/blGdrjNbSb8LaRosU=; b=kJAyEOmUdURhspy3fyNJpBnQuTbtyepp5NHgwr2o8r9VBTjgyp/gZqos9E1Lq2GhHE LaaPu5zZCqrT7hEhzWd+8IAEgb5Sx+2xSK+PhHtY8BSaXEvttlgudGZHpvm96DdY1MbM 9fDOHtNClPTbmixGI/B+D29oHp0gSZokQQm/Fa+7rLzKrJ56jlUhptKR+GyegxVaKqLq dnYHb7m79w8nQEbCigzFHyncqLZTFEO63FKxCzQkYlClZza/3dRYH1k6M7m7iJ4gUNtu 8Yk1w+a9SEiOGS9gEIRJmpXSh/+W4Znp7CC9n1+PeJsSxnovqLcNNeHU6i2a2JieGeEc zK1w== X-Gm-Message-State: AHPjjUh8DC5XcuNsSghZtdmsd3qfsAxjMKhzgLfi7BmPVJXzrtgyMykR 6dhHI+vShPVR6gRn5RfZRps/zalNSKU= X-Google-Smtp-Source: AOwi7QASxoLUvQbWpTLh/xtvDFkfSWtkx06rLZL9bX0Ct7oJQjKSWBjlCDqEBesJMxCiJZi+GKP1cg== X-Received: by 10.84.246.203 with SMTP id j11mr9840637plt.312.1506402282885; Mon, 25 Sep 2017 22:04:42 -0700 (PDT) Received: from [192.168.242.5] (c-24-4-93-209.hsd1.ca.comcast.net. [24.4.93.209]) by smtp.gmail.com with ESMTPSA id d186sm12715648pfd.117.2017.09.25.22.04.40 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 25 Sep 2017 22:04:40 -0700 (PDT) From: Mark Ferlatte Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.0 \(3445.1.6\)) Subject: 25.3; Certificate authority on macOS is empty Message-Id: Date: Mon, 25 Sep 2017 22:04:39 -0700 To: bug-gnu-emacs@gnu.org X-Mailer: Apple Mail (2.3445.1.6) X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.0 (----) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Tue, 26 Sep 2017 01:17:00 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.0 (----) When running (package-refresh-contents) on macOS, MELPA returns a TLS error. This ended up being due to gnutls-trustfiles not having a working default entry for macOS. Adding /etc/ssl/cert.pem to gnutls-trustfiles resolves the issue. I believe that adding that to the default settings in lisp/net/gnutls.el would be a helpful change. In GNU Emacs 25.3.1 (x86_64-apple-darwin13.4.0, NS appkit-1265.21 = Version 10.9.5 (Build 13F1911)) of 2017-09-12 built on builder10-9.local Windowing system distributor 'Apple', version 10.3.1561 Configured using: 'configure --with-ns '--enable-locallisppath=3D/Library/Application Support/Emacs/${version}/site-lisp:/Library/Application Support/Emacs/site-lisp' --with-modules' Configured features: NOTIFY ACL GNUTLS LIBXML2 ZLIB TOOLKIT_SCROLL_BARS NS MODULES Important settings: value of $LANG: en_US.UTF-8 locale-coding-system: utf-8-unix Major mode: EL Minor modes in effect: rainbow-mode: t rainbow-delimiters-mode: t elisp-slime-nav-mode: t guru-mode: t TeX-PDF-mode: t global-flycheck-mode: t flycheck-mode: t which-function-mode: t global-company-mode: t company-mode: t flx-ido-mode: t ido-ubiquitous-mode: t editorconfig-mode: t global-diff-hl-mode: t diff-auto-refine-mode: t winner-mode: t global-undo-tree-mode: t undo-tree-mode: t whitespace-mode: t global-anzu-mode: t anzu-mode: t projectile-mode: t flyspell-mode: t volatile-highlights-mode: t global-hl-line-mode: t recentf-mode: t savehist-mode: t save-place-mode: t show-smartparens-global-mode: t show-smartparens-mode: t smartparens-strict-mode: t smartparens-mode: t global-auto-revert-mode: t delete-selection-mode: t prelude-global-mode: t prelude-mode: t shell-dirtrack-mode: t which-key-mode: t beacon-mode: t tooltip-mode: t global-eldoc-mode: t eldoc-mode: t electric-indent-mode: t mouse-wheel-mode: t menu-bar-mode: t file-name-shadow-mode: t global-font-lock-mode: t font-lock-mode: t auto-composition-mode: t auto-encryption-mode: t auto-compression-mode: t size-indication-mode: t column-number-mode: t line-number-mode: t transient-mark-mode: t Recent messages: Loading /Users/ferlatte/.emacs.d/savefile/recentf...done Loading Prelude=E2=80=99s modules... Loading /Users/ferlatte/.emacs.d/prelude-modules.el (source)...done Loading personal configuration files in = /Users/ferlatte/.emacs.d/personal... Loading /Users/ferlatte/.emacs.d/personal/custom.el (source)...done Loading /Users/ferlatte/.emacs.d/personal/init.el (source)...done Prelude is ready to do thy bidding, Master ferlatte! Starting new Ispell process aspell with default dictionary... For information about GNU Emacs and the GNU system, type C-h C-a. Prelude tip: Press to search in GitHub. Load-path shadows: /Users/ferlatte/.emacs.d/elpa/seq-20151028.759/seq hides = /Applications/Emacs.app/Contents/Resources/lisp/emacs-lisp/seq /Users/ferlatte/.emacs.d/elpa/let-alist-1.0.5/let-alist hides = /Applications/Emacs.app/Contents/Resources/lisp/emacs-lisp/let-alist Features: (shadow sort editorconfig-core editorconfig-core-handle editorconfig-fnmatch mail-extr emacsbug message rfc822 mml mml-sec epg mm-decode mm-bodies mm-encode mail-parse rfc2231 mailabbrev gmm-utils mailheader sendmail rfc2047 rfc2045 ietf-drums mail-utils company-anaconda anaconda-mode pythonic f python-el-fgallina-expansions smartparens-python python tramp-sh rainbow-mode rainbow-delimiters elisp-slime-nav guru-mode init server prelude-yaml prelude-xml nxml-mode-expansions rng-nxml rng-valid rng-loc rng-uri rng-parse nxml-parse rng-match rng-dt rng-util rng-pttrn nxml-ns nxml-mode nxml-outln nxml-rap nxml-util nxml-glyph nxml-enc xmltok prelude-scss prelude-shell sh-script smie executable prelude-scheme geiser prelude-ruby prelude-python prelude-perl prelude-org prelude-latex company-auctex yasnippet latex-mode-expansions latex tex-ispell tex-style tex crm smartparens-latex prelude-js js2-mode-expansions js2-mode js-mode-expansions smartparens-javascript js html-mode-expansions smartparens-html sgml-mode cc-mode-expansions cc-mode cc-fonts cc-guess cc-menus cc-cmds cc-styles cc-align cc-engine cc-vars cc-defs prelude-go go-projectile vc-git go-rename go-guru go-eldoc go-mode url url-proxy url-privacy url-expand url-methods url-history url-cookie url-domsuf url-util mailcap find-file ffap prelude-emacs-lisp prelude-css prelude-common-lisp prelude-lisp prelude-c prelude-programming flycheck find-func subr-x which-func prelude-company company-oddmuse company-keywords company-etags company-gtags company-dabbrev-code company-dabbrev company-files company-capf company-cmake company-xcode company-clang company-semantic company-eclim company-template company-css company-nxml company-bbdb company prelude-ido smex flx-ido flx ido-completing-read+ memoize cus-edit cus-start cus-load prelude-osx exec-path-from-shell prelude-global-keybindings prelude-editor editorconfig operate-on-number calc-bin calc-ext calc calc-loaddefs calc-macs diff-hl smartrep vc-dir ewoc vc vc-dispatcher diff-mode easy-mmode winner undo-tree diff esh-var esh-io esh-cmd esh-opt esh-ext esh-proc esh-arg esh-groups eshell esh-module esh-mode esh-util re-builder whitespace tabify browse-kill-ring derived midnight ediff-merg ediff-wind ediff-diff ediff-mult ediff-help ediff-init ediff-util ediff dired-x dired anzu avy projectile grep compile ibuf-ext ibuffer bookmark pp expand-region text-mode-expansions er-basic-expansions expand-region-core expand-region-custom flyspell ispell rect etags xref project volatile-highlights hl-line windmove recentf tree-widget wid-edit savehist saveplace diminish edmacro kmacro smartparens-config smartparens autorevert filenotify delsel prelude-mode crux ido tramp tramp-compat tramp-loaddefs trampver shell pcomplete comint ansi-color ring format-spec imenu-anywhere imenu prelude-core epl ov thingatpt prelude-ui which-key beacon smart-mode-line advice rich-minority solarized-light-theme solarized color prelude-custom prelude-packages cl finder-inf tex-site gh-common gh-profile url-parse auth-source gnus-util mm-util help-fns mail-prsvr password-cache url-vars s marshal eieio-compat cl-seq ht json map dash eieio eieio-core cl-macs rx slime-autoloads info package epg-config seq byte-opt gv bytecomp byte-compile cl-extra help-mode easymenu cconv cl-loaddefs pcase cl-lib time-date mule-util tooltip eldoc electric uniquify ediff-hook vc-hooks lisp-float-type mwheel ns-win ucs-normalize term/common-win tool-bar dnd fontset image regexp-opt fringe tabulated-list newcomment elisp-mode lisp-mode prog-mode register page menu-bar rfn-eshadow timer select scroll-bar mouse jit-lock font-lock syntax facemenu font-core frame cl-generic cham georgian utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao korean japanese eucjp-ms cp51932 hebrew greek romanian slovak czech european ethiopic indian cyrillic chinese charscript case-table epa-hook jka-cmpr-hook help simple abbrev minibuffer cl-preloaded nadvice loaddefs button faces cus-face macroexp files text-properties overlay sha1 md5 base64 format env code-pages mule custom widget hashtable-print-readable backquote kqueue cocoa ns multi-tty make-network-process emacs) Memory information: ((conses 16 764186 258064) (symbols 48 57619 1) (miscs 40 94 379) (strings 32 139301 211185) (string-bytes 1 4110652) (vectors 16 104184) (vector-slots 8 2083378 366691) (floats 8 9271 8712) (intervals 56 1092 443) (buffers 976 17)) ------------=_1512860282-24480-1-- From unknown Fri Aug 15 17:20:23 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: Zack Weinberg Subject: bug#24396: closed (Re: bug#28603: 25.3; Certificate authority on macOS is empty) Message-ID: References: <87d13nbjbo.fsf@lifelogs.com> X-Gnu-PR-Message: they-closed 24396 X-Gnu-PR-Package: emacs X-Gnu-PR-Keywords: security Reply-To: 24396@debbugs.gnu.org Date: Sat, 09 Dec 2017 22:58:03 +0000 Content-Type: multipart/mixed; boundary="----------=_1512860283-24480-3" This is a multi-part message in MIME format... ------------=_1512860283-24480-3 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #28603: 25.1; Doesn't trust Let's Encrypt certificates (used by MELPA) which was filed against the emacs package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 24396@debbugs.gnu.org. --=20 28603: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D28603 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1512860283-24480-3 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 28603-done) by debbugs.gnu.org; 9 Dec 2017 22:57:57 +0000 Received: from localhost ([127.0.0.1]:54280 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eNo4C-0006MY-PX for submit@debbugs.gnu.org; Sat, 09 Dec 2017 17:57:56 -0500 Received: from mail-qk0-f177.google.com ([209.85.220.177]:37427) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eNo4A-0006MK-Sy for 28603-done@debbugs.gnu.org; Sat, 09 Dec 2017 17:57:55 -0500 Received: by mail-qk0-f177.google.com with SMTP id i130so3018947qke.4 for <28603-done@debbugs.gnu.org>; Sat, 09 Dec 2017 14:57:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lifelogs.com; s=google; h=from:to:cc:subject:organization:references:mail-copies-to:date :in-reply-to:message-id:user-agent:mime-version; bh=0+EY3/j5NzV01yXcUarcLPDpxz42QF1srVfUSEhfFXw=; b=tdhNZNBcQjsnuV7gjTYaCfEdICWtrmMDHoXV2l/wt5dxzUN9zD+xrA2WR1sOTSyhpn dZABAHoeSOmkUWa0Wx+y+8/BA15sK0vcQmwUXlaLyLiwd8eFCL0C6kZKxi1+SwM9pBd/ MZycZCMI+MA91mpWHOlHkau2ajXERKDvHhM68= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:organization:references :mail-copies-to:date:in-reply-to:message-id:user-agent:mime-version; bh=0+EY3/j5NzV01yXcUarcLPDpxz42QF1srVfUSEhfFXw=; b=HC6G6bf+vB69J+VgJtao+2A1vDomZAXtMBsNjQWSbG4zlI7TZrd1NjlJxu60eHkxv8 KvMDW+VddDRtmGYDOfFHvTGYy7H7KrtAb7P4+cAkbNImtqv/J0Ou685Gk91VDoUm/KG7 9i7YdFUnSiw1pkB+Yk9n392tIvP5zJlXUwebZKKe5LTluEe57zheqzuTZjLjkGu2H/CC QD3qygMtP7fG1+xNBFvnUg2xVPePYMfYraezY6viRu/i7ebjIFsg/i4QvbOGRgyurvnw UoU22fUG9DJUorHqO8UKuF929/9l4N65ie1yw0L1d4qOTsmzG4KHOlxSoXeyMCCXrOrw vQqw== X-Gm-Message-State: AKGB3mJP6PH3AzYCPHQEBESwhsuQE3kqDbxsy6BkZN5hybYfcV1zT+EF lZPcMZLQUS1pxLr1cxyeNXzZbq37skc= X-Google-Smtp-Source: ACJfBouCWD1tPBkmCemqYny7LZvH2zSSKpoe0KUYGv+XgcqCySxACufnhefYoRIt2YwuoVEMQm5ETA== X-Received: by 10.55.120.7 with SMTP id t7mr14071902qkc.283.1512860268860; Sat, 09 Dec 2017 14:57:48 -0800 (PST) Received: from flea (c-76-28-41-155.hsd1.ma.comcast.net. [76.28.41.155]) by smtp.gmail.com with ESMTPSA id e70sm2243872qka.83.2017.12.09.14.57.48 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Sat, 09 Dec 2017 14:57:48 -0800 (PST) From: Ted Zlatanov To: Mark Ferlatte Subject: Re: bug#28603: 25.3; Certificate authority on macOS is empty Organization: =?utf-8?B?0KLQtdC+0LTQvtGAINCX0LvQsNGC0LDQvdC+0LI=?= @ Cienfuegos References: X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Copies-To: never Date: Sat, 09 Dec 2017 17:57:47 -0500 In-Reply-To: (Mark Ferlatte's message of "Mon, 25 Sep 2017 22:04:39 -0700") Message-ID: <87d13nbjbo.fsf@lifelogs.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 28603-done Cc: 28603-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) On Mon, 25 Sep 2017 22:04:39 -0700 Mark Ferlatte wrote: MF> When running (package-refresh-contents) on macOS, MELPA returns a TLS MF> error. This ended up being due to gnutls-trustfiles not having a working MF> default entry for macOS. Adding /etc/ssl/cert.pem to gnutls-trustfiles MF> resolves the issue. MF> I believe that adding that to the default settings in lisp/net/gnutls.el MF> would be a helpful change. Thanks for the suggestion. This is done on the emacs-26 branch as a bugfix and will be merged into master later. Ted ------------=_1512860283-24480-3 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 8 Sep 2016 17:36:26 +0000 Received: from localhost ([127.0.0.1]:53846 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bi3FP-0000By-BS for submit@debbugs.gnu.org; Thu, 08 Sep 2016 13:36:26 -0400 Received: from eggs.gnu.org ([208.118.235.92]:34562) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bi3FN-0000Bm-Vy for submit@debbugs.gnu.org; Thu, 08 Sep 2016 13:36:22 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bi3FH-0006kN-6T for submit@debbugs.gnu.org; Thu, 08 Sep 2016 13:36:16 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: *** X-Spam-Status: No, score=3.2 required=5.0 tests=BAYES_50,RCVD_IN_SORBS_SPAM autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:39928) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bi3FH-0006kJ-3M for submit@debbugs.gnu.org; Thu, 08 Sep 2016 13:36:15 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:53741) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bi3FF-0002WG-GL for bug-gnu-emacs@gnu.org; Thu, 08 Sep 2016 13:36:14 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bi3FC-0006jZ-PX for bug-gnu-emacs@gnu.org; Thu, 08 Sep 2016 13:36:13 -0400 Received: from mailbackend.panix.com ([166.84.1.89]:60349) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bi3FC-0006jF-LT for bug-gnu-emacs@gnu.org; Thu, 08 Sep 2016 13:36:10 -0400 Received: from mail-wm0-f42.google.com (mail-wm0-f42.google.com [74.125.82.42]) by mailbackend.panix.com (Postfix) with ESMTPSA id 068EF1BCA5 for ; Thu, 8 Sep 2016 13:36:08 -0400 (EDT) Received: by mail-wm0-f42.google.com with SMTP id b187so181832553wme.1 for ; Thu, 08 Sep 2016 10:36:08 -0700 (PDT) X-Gm-Message-State: AE9vXwNaRRfGzMQIBODUhTDb/P4/TN89jIwXaUoWxbVKzYKKjXbJhKfCD5uPA0M2mz6p1ejglyDGE8MUifYyhw== X-Received: by 10.194.246.8 with SMTP id xs8mr780838wjc.64.1473356167483; Thu, 08 Sep 2016 10:36:07 -0700 (PDT) MIME-Version: 1.0 Received: by 10.28.36.197 with HTTP; Thu, 8 Sep 2016 10:36:06 -0700 (PDT) From: Zack Weinberg Date: Thu, 8 Sep 2016 13:36:06 -0400 X-Gmail-Original-Message-ID: Message-ID: Subject: 25.1; Doesn't trust Let's Encrypt certificates (used by MELPA) To: bug-gnu-emacs@gnu.org Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux (Android) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -2.0 (--) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.0 (--) Emacs 25.1-rc2 (prebuilt for OSX, from https://emacsformacosx.com/emacs-builds/Emacs-pretest-25.1-rc2-universal.dm= g) does not accept TLS certificates issued by Let's Encrypt (https://letsencrypt.org/). This is a particular problem because MELPA (specifically, https://stable.melpa.org) uses such a certificate. To observe the problem, run these Lisp commands: --- (require 'package) (add-to-list 'package-archives '("melpa-stable" . "https://stable.melpa.org/packages/")) (package-initialize) (package-list-packages) --- You will get a transient *Network Security Manager* buffer reading --- Certificate information Issued by: Let's Encrypt Authority X3 Issued to: CN=3Dstable.melpa.org Hostname: stable.melpa.org Public key: RSA, signature: RSA-SHA256 Protocol: TLS1.2, key: ECDHE-RSA, cipher: AES-128-GCM, mac: AEAD Security level: Medium Valid: From 2016-09-04 to 2016-12-03 The TLS connection to stable.melpa.org:443 is insecure for the following reasons: the certificate was signed by an unknown and therefore untrusted authority certificate could not be verified --- and a prompt asking whether to continue connecting. (Incidentally, the *Network Security Manager* buffer is deleted after you answer the question, and C-x o or clicking in that buffer counts as answering "no". This makes it annoyingly difficult to capture the contents of that buffer in order to, say, include it in a bug report.) zw In GNU Emacs 25.1.1 (x86_64-apple-darwin13.4.0, NS appkit-1265.21 Version 10.9.5 (Build 13F1911)) of 2016-08-21 built on builder10-9.porkrind.org Windowing system distributor 'Apple', version 10.3.1404 Configured using: 'configure --with-ns '--enable-locallisppath=3D/Library/Application Support/Emacs/${version}/site-lisp:/Library/Application Support/Emacs/site-lisp'' Configured features: NOTIFY ACL GNUTLS LIBXML2 ZLIB TOOLKIT_SCROLL_BARS NS Important settings: value of $LANG: en_US.UTF-8 locale-coding-system: utf-8-unix Major mode: Fundamental Minor modes in effect: show-paren-mode: t shell-dirtrack-mode: t tooltip-mode: t global-eldoc-mode: t electric-indent-mode: t mouse-wheel-mode: t file-name-shadow-mode: t global-font-lock-mode: t font-lock-mode: t auto-composition-mode: t auto-encryption-mode: t auto-compression-mode: t line-number-mode: t transient-mark-mode: t Recent messages: Type C-x 1 to delete the help window. Failed to download =E2=80=98melpa-stable=E2=80=99 archive. Mark set Package refresh done No apropos matches for =E2=80=98security=E2=80=99 Load-path shadows: None found. Features: (shadow sort mail-extr emacsbug sendmail apropos mm-archive message rfc822 mml mml-sec epg mailabbrev gmm-utils mailheader mm-decode mm-bodies mm-encode url-handlers mail-utils network-stream nsm starttls url-http tls gnutls mail-parse rfc2231 rfc2047 rfc2045 ietf-drums url-gw url-cache url-auth url url-proxy url-privacy url-expand url-methods url-history url-cookie url-domsuf url-util url-parse url-vars mailcap server paren cus-start cus-load tramp tramp-compat auth-source cl-seq eieio eieio-core cl-macs gnus-util mm-util help-fns mail-prsvr password-cache tramp-loaddefs trampver shell pcomplete comint ansi-color ring format-spec advice dired finder-inf package epg-config seq byte-opt gv bytecomp byte-compile cl-extra help-mode easymenu cconv cl-loaddefs pcase cl-lib time-date mule-util tooltip eldoc electric uniquify ediff-hook vc-hooks lisp-float-type mwheel ns-win ucs-normalize term/common-win tool-bar dnd fontset image regexp-opt fringe tabulated-list newcomment elisp-mode lisp-mode prog-mode register page menu-bar rfn-eshadow timer select scroll-bar mouse jit-lock font-lock syntax facemenu font-core frame cl-generic cham georgian utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao korean japanese eucjp-ms cp51932 hebrew greek romanian slovak czech european ethiopic indian cyrillic chinese charscript case-table epa-hook jka-cmpr-hook help simple abbrev minibuffer cl-preloaded nadvice loaddefs button faces cus-face macroexp files text-properties overlay sha1 md5 base64 format env code-pages mule custom widget hashtable-print-readable backquote kqueue cocoa ns multi-tty make-network-process emacs) Memory information: ((conses 16 239636 56351) (symbols 48 24300 0) (miscs 40 83 256) (strings 32 29846 8346) (string-bytes 1 864838) (vectors 16 38677) (vector-slots 8 714931 12891) (floats 8 248 88) (intervals 56 698 735) (buffers 976 22)) ------------=_1512860283-24480-3--