From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Eli Zaretskii Newsgroups: gmane.emacs.devel Subject: Re: NSM certificate prompt Date: Sat, 13 Dec 2014 18:01:26 +0200 Message-ID: <8361df5yjt.fsf@gnu.org> References: <83a92r625n.fsf@gnu.org> Reply-To: Eli Zaretskii NNTP-Posting-Host: plane.gmane.org X-Trace: ger.gmane.org 1418486553 32213 80.91.229.3 (13 Dec 2014 16:02:33 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sat, 13 Dec 2014 16:02:33 +0000 (UTC) Cc: emacs-devel@gnu.org To: Lars Magne Ingebrigtsen Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sat Dec 13 17:02:27 2014 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Xzp9H-00071F-Ea for ged-emacs-devel@m.gmane.org; Sat, 13 Dec 2014 17:02:27 +0100 Original-Received: from localhost ([::1]:33512 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Xzp9H-0007Cs-2T for ged-emacs-devel@m.gmane.org; Sat, 13 Dec 2014 11:02:27 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:58516) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Xzp99-0007Cm-2I for emacs-devel@gnu.org; Sat, 13 Dec 2014 11:02:24 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Xzp93-0007Wv-8X for emacs-devel@gnu.org; Sat, 13 Dec 2014 11:02:19 -0500 Original-Received: from mtaout22.012.net.il ([80.179.55.172]:55810) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Xzp92-0007Wn-W6 for emacs-devel@gnu.org; Sat, 13 Dec 2014 11:02:13 -0500 Original-Received: from conversion-daemon.a-mtaout22.012.net.il by a-mtaout22.012.net.il (HyperSendmail v2007.08) id <0NGJ004003291E00@a-mtaout22.012.net.il> for emacs-devel@gnu.org; Sat, 13 Dec 2014 18:01:33 +0200 (IST) Original-Received: from HOME-C4E4A596F7 ([87.69.4.28]) by a-mtaout22.012.net.il (HyperSendmail v2007.08) with ESMTPA id <0NGJ003DI36KR570@a-mtaout22.012.net.il>; Sat, 13 Dec 2014 18:01:33 +0200 (IST) In-reply-to: X-012-Sender: halo1@inter.net.il X-detected-operating-system: by eggs.gnu.org: Solaris 10 X-Received-From: 80.179.55.172 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:180014 Archived-At: > From: Lars Magne Ingebrigtsen > Cc: emacs-devel@gnu.org > Date: Sat, 13 Dec 2014 16:12:52 +0100 > > Eli Zaretskii writes: > > > Issued by: Google Internet Authority G2 > > Issued to: Google Inc > > Hostname: accounts.google.com > > If I go to https://accounts.google.com, I do not get any warnings. > (This is on Debian.) Is it possible that your CA bundle doesn't include > the Google Internet Authority G2 CA root certificate? GnuTLS on Windows doesn't by default use the CA bundle, it uses the Windows's own certificate store. I don't know how to examine that store, except by writing a program that accesses it. If the conclusion is that this is the source of the problem, I'll do that, but I wonder how both MS IE and Firefox have no problems with that on the same system.