GNU bug report logs - #29978
wishlist: gnutls-verify-error needs a 'ask mode

Previous Next

Full log

View this message in rfc822 format

From: help-debbugs <at> gnu.org (GNU bug Tracking System)
To: Robert Pluim <rpluim <at> gmail.com>
Subject: bug#29978: closed (Re: bug#29978: wishlist: gnutls-verify-error
 needs a 'ask mode)
Date: Thu, 04 Jan 2018 16:47:02 +0000

[Message part 1 (text/plain, inline)]

Your bug report

#29978: wishlist: gnutls-verify-error needs a 'ask mode

which was filed against the emacs package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to 29978 <at> debbugs.gnu.org.

-- 
29978: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=29978
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems

[Message part 2 (message/rfc822, inline)]

From: Robert Pluim <rpluim <at> gmail.com>
To: Andreas Schwab <schwab <at> suse.de>
Cc: 29978-done <at> debbugs.gnu.org
Subject: Re: bug#29978: wishlist: gnutls-verify-error needs a 'ask mode
Date: Thu, 04 Jan 2018 17:46:36 +0100

Robert Pluim <rpluim <at> gmail.com> writes:

> Andreas Schwab <schwab <at> suse.de> writes:
>
>> On Jan 04 2018, Robert Pluim <rpluim <at> gmail.com> wrote:
>>
>>> Verification using gnutls-verify-error is currently an either-or
>>> proposition: if the verification fails, there's no fallback. Typical
>>> browser implementations allow querying the user for the desired
>>> action, emacs should allow something similar.
>>
>> Isn't that what NSM is about?
>
> NSM doesn't currently come into play until gnutls.c has finished
> setting up the TLS connection. Since gnutls.c is the one doing the
> verification, by then it's too late.

Umm, nevermind. I hadn't realized nsm already implemented these
checks. Closing.

[Message part 3 (message/rfc822, inline)]

From: Robert Pluim <rpluim <at> gmail.com>
To: bug-gnu-emacs <at> gnu.org
Subject: wishlist: gnutls-verify-error needs a 'ask mode
Date: Thu, 04 Jan 2018 16:21:21 +0100

Verification using gnutls-verify-error is currently an either-or
proposition: if the verification fails, there's no fallback. Typical
browser implementations allow querying the user for the desired
action, emacs should allow something similar.

Bonus: allow updating gnutls-verify-error automatically based on the
user's response

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.