From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Michael Albinus Newsgroups: gmane.emacs.devel Subject: Re: NSM certificate prompt Date: Sat, 13 Dec 2014 20:09:19 +0100 Message-ID: <87iohfe59c.fsf@gmx.de> References: <83a92r625n.fsf@gnu.org> <87wq5vefiz.fsf@gmx.de> <83388j5wrs.fsf@gnu.org> <87mw6reaxu.fsf@gmx.de> <83y4qb4eeg.fsf@gnu.org> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1418497791 2753 80.91.229.3 (13 Dec 2014 19:09:51 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sat, 13 Dec 2014 19:09:51 +0000 (UTC) Cc: emacs-devel@gnu.org To: Eli Zaretskii Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sat Dec 13 20:09:44 2014 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Xzs4V-0008Io-OS for ged-emacs-devel@m.gmane.org; Sat, 13 Dec 2014 20:09:43 +0100 Original-Received: from localhost ([::1]:34047 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Xzs4V-0004g0-9B for ged-emacs-devel@m.gmane.org; Sat, 13 Dec 2014 14:09:43 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:56515) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Xzs4M-0004fe-Fo for emacs-devel@gnu.org; Sat, 13 Dec 2014 14:09:40 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Xzs4G-0005eP-Jw for emacs-devel@gnu.org; Sat, 13 Dec 2014 14:09:34 -0500 Original-Received: from mout.gmx.net ([212.227.17.22]:64900) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Xzs49-0005Zg-AR; Sat, 13 Dec 2014 14:09:21 -0500 Original-Received: from detlef.gmx.de ([79.195.17.88]) by mail.gmx.com (mrgmx102) with ESMTPSA (Nemesis) id 0M8pKi-1Y5ON209Ou-00CD4u; Sat, 13 Dec 2014 20:09:20 +0100 In-Reply-To: <83y4qb4eeg.fsf@gnu.org> (Eli Zaretskii's message of "Sat, 13 Dec 2014 20:01:59 +0200") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.0.50 (gnu/linux) X-Provags-ID: V03:K0:tjW1Fw4QKom6wB46FRczFJno7/9I60rkLAi87VD1vLyS3eqqzCl FzaJQMck5kgqVrH08GX/t4CUnby/8HjkFK11GeAwkgmbfS6Z7W64/n56kd4zC8cd1IMWSF9 IxJvZIMXi8lgaiiGjkiQcvZD/3Jl/tHm6H/WF2tD5lMWy0isx4LGJkD0YLYiMf0zvb+UYFt 4rRdyFmFYykHrz3fMi4xQ== X-UI-Out-Filterresults: notjunk:1; X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x [generic] X-Received-From: 212.227.17.22 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:180030 Archived-At: Eli Zaretskii writes: >> The problem is to distribute and maintain such root >> certificates. Browsers have them built-in, but I don't believe Emacs >> (eww) shall do so. > > GnuTLS on Windows uses the CertEnumCertificatesInStore API to retrieve > all the Root and Certification Authority certificates known to the > system. I suppose at least IE uses the same API, so I wonder how come > GnuTLS fails to validate the certificates, while IE succeeds. As usual, I cannot speak about MS Windows. But even if IE uses the same API, it might read the root certificates from somewhere else. And like other browsers, it might also carry builtin root certificates inside. Best regards, Michael.