bug#22297: 24.5; gnutls builds do not verify https by default

[Glyph Lefkowitz <glyph@twistedmatrix.com>]

;; This elisp program illustrates the issue.

(require 'cl)
(let ((bad-hosts
       (loop for bad
	     in `("https://wrong.host.badssl.com/"
		  "https://self-signed.badssl.com/")
	     if (condition-case e
		    (url-retrieve
		     bad (lambda (retrieved) t))
		  (error nil))
	     collect bad)))
  (if bad-hosts
      (error (format "tls misconfigured; retrieved %s ok"
		     bad-hosts))
    (url-retrieve "https://badssl.com"
		  (lambda (retrieved) t))))




In GNU Emacs 24.5.1 (x86_64-apple-darwin15.2.0, NS apple-appkit-1404.34)
of 2015-12-19 on milly
Configured using:
`configure --prefix=/Homebrew/Cellar/emacs/24.5
--enable-locallisppath=/Homebrew/share/emacs/site-lisp
--infodir=/Homebrew/Cellar/emacs/24.5/share/info/emacs --with-xml2
--without-dbus --with-gnutls --with-rsvg --without-popmail --with-ns
--disable-ns-self-contained'

Important settings:
  value of $LANG: en_US.UTF-8
  locale-coding-system: utf-8-unix

Major mode: Emacs-Lisp

Minor modes in effect:
  tooltip-mode: t
  electric-indent-mode: t
  mouse-wheel-mode: t
  tool-bar-mode: t
  menu-bar-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  auto-composition-mode: t
  auto-encryption-mode: t
  auto-compression-mode: t
  line-number-mode: t
  transient-mark-mode: t

Recent messages:
Undo!
Auto-saving...done
Entering debugger...
Back to top level.
cl
Contacting host: wrong.host.badssl.com:443
Entering debugger...
Back to top level.
End of buffer
Mark set
Beginning of buffer

Load-path shadows:
None found.

Features:
(shadow sort mail-extr emacsbug message format-spec rfc822 mml mml-sec
mm-decode mm-bodies mm-encode mailabbrev gmm-utils mailheader sendmail
cl-macs cl gv mail-utils help-mode easymenu debug gnutls network-stream
starttls url-http tls mail-parse rfc2231 rfc2047 rfc2045 ietf-drums
url-gw url-cache url-auth url url-proxy url-privacy url-expand
url-methods url-history url-cookie url-domsuf url-util url-parse
auth-source eieio byte-opt bytecomp byte-compile cl-extra cl-loaddefs
cl-lib cconv eieio-core gnus-util mm-util help-fns mail-prsvr
password-cache url-vars mailcap misearch multi-isearch vc-git xterm
time-date tooltip electric uniquify ediff-hook vc-hooks lisp-float-type
mwheel ns-win tool-bar dnd fontset image regexp-opt fringe
tabulated-list newcomment lisp-mode prog-mode register page menu-bar
rfn-eshadow timer select scroll-bar mouse jit-lock font-lock syntax
facemenu font-core frame cham georgian utf-8-lang misc-lang vietnamese
tibetan thai tai-viet lao korean japanese hebrew greek romanian slovak
czech european ethiopic indian cyrillic chinese case-table epa-hook
jka-cmpr-hook help simple abbrev minibuffer nadvice loaddefs button
faces cus-face macroexp files text-properties overlay sha1 md5 base64
format env code-pages mule custom widget hashtable-print-readable
backquote make-network-process cocoa ns multi-tty emacs)

Memory information:
((conses 16 99881 8328)
(symbols 48 20184 0)
(miscs 40 64 258)
(strings 32 18027 4634)
(string-bytes 1 506262)
(vectors 16 10261)
(vector-slots 8 367085 7832)
(floats 8 69 390)
(intervals 56 444 15)
(buffers 960 18))