From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Eli Zaretskii Newsgroups: gmane.emacs.devel Subject: Re: NSM certificate prompt Date: Sat, 13 Dec 2014 19:06:11 +0200 Message-ID: <83zjar4gzg.fsf@gnu.org> References: <83a92r625n.fsf@gnu.org> <87wq5vefiz.fsf@gmx.de> <87r3w3ebds.fsf@gmx.de> Reply-To: Eli Zaretskii NNTP-Posting-Host: plane.gmane.org X-Trace: ger.gmane.org 1418490412 24362 80.91.229.3 (13 Dec 2014 17:06:52 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sat, 13 Dec 2014 17:06:52 +0000 (UTC) Cc: larsi@gnus.org, emacs-devel@gnu.org To: Michael Albinus Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sat Dec 13 18:06:45 2014 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Xzq9V-0008SC-CU for ged-emacs-devel@m.gmane.org; Sat, 13 Dec 2014 18:06:45 +0100 Original-Received: from localhost ([::1]:33780 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Xzq9U-0004h9-TD for ged-emacs-devel@m.gmane.org; Sat, 13 Dec 2014 12:06:44 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:38773) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Xzq9C-0004gB-Ga for emacs-devel@gnu.org; Sat, 13 Dec 2014 12:06:31 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Xzq97-0004tn-AO for emacs-devel@gnu.org; Sat, 13 Dec 2014 12:06:26 -0500 Original-Received: from mtaout20.012.net.il ([80.179.55.166]:32808) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Xzq97-0004tM-2B for emacs-devel@gnu.org; Sat, 13 Dec 2014 12:06:21 -0500 Original-Received: from conversion-daemon.a-mtaout20.012.net.il by a-mtaout20.012.net.il (HyperSendmail v2007.08) id <0NGJ00L005ZFAP00@a-mtaout20.012.net.il> for emacs-devel@gnu.org; Sat, 13 Dec 2014 19:06:19 +0200 (IST) Original-Received: from HOME-C4E4A596F7 ([87.69.4.28]) by a-mtaout20.012.net.il (HyperSendmail v2007.08) with ESMTPA id <0NGJ00L2B66IBD00@a-mtaout20.012.net.il>; Sat, 13 Dec 2014 19:06:19 +0200 (IST) In-reply-to: <87r3w3ebds.fsf@gmx.de> X-012-Sender: halo1@inter.net.il X-detected-operating-system: by eggs.gnu.org: Solaris 10 X-Received-From: 80.179.55.166 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:180021 Archived-At: > From: Michael Albinus > Cc: Eli Zaretskii , emacs-devel@gnu.org > Date: Sat, 13 Dec 2014 17:57:03 +0100 > > A better solution might be to use system-installed certificates. For > example, Debian offers the package ca-certificates. It installs known > certificates at /usr/share/ca-certificates, which could be used. > See also /usr/share/doc/ca-certificates/README.Debian. > > Similar packages might exist for other systems. Don't know, whether > gnutls uses them already by default. It does, and I do have the certificate bundle installed on the system I'm experiencing this. But I configured GnuTLS to use the Windows's certificate store for now, so the bundle is not used in my build of GnuTLS. I can change that, but I don't yet have sufficient information to claim that this is the root cause for the problem. See my other messages. I'd like to understand the problem more before I decide to dig into the code or ask GnuTLS developers a question. I still feel this is somehow a configuration issue, or maybe Emacs doesn't use GnuTLS correctly, at least on Windows.