bug#9017: 24.0.50; gnutls.c: [0] (Emacs) fatal error: Key usage violation in certificate has been detected.

["Roland Winkler" <winkler@gnu.org>]

On Sun Jul 17 2011 Lars Magne Ingebrigtsen wrote:
> "Roland Winkler" <winkler@gnu.org> writes:
> > RCPT TO:<winkler@gnu.org>
> > 554 <winkler@gnu.org>: Recipient address rejected: Access denied
> 
> Is this with all the workarounds (including the `smtpmail-stream-type')
> disabled?

For my recent attempts to send mail, I have smtpmail-stream-type
bound to nil and no redifinition of gnutls-available-p.

The only customization is

  (setq gnutls-algorithm-priority "normal:-dhe-rsa")

> What's the SMTP server type?

How can I find this out?
(The server is running some flavor of GNU/Linux)

> If you don't have any customisations enabled, I may have fixed this
> particular problem i bzr Emacs now.

Now things have changed, but still no success. Now I get

RCPT TO:<winkler@gnu.org>
530 Must issue a STARTTLS command first

As in my previous email, emacs still does not ask me for the
username and password.

> > So even if the command line gnutls-cli is not perfect by itself, it
> > would give the user a more forgiving transition period if with Emacs
> > 24 the old approach remained available as a fallback.
> 
> Sure.  But there's no reason why the built-in GnuTLS support shouldn't
> be even more flexible than the gnutls-cli support.

I cannot claim I understand these things in more detail. If you feel
confident that you can implement in the new code the same amount of
customizability (or more) that's fine!

Roland