Re: gnutls-verify-error issues

[Hubert Chathi <hubert@uhoreg.ca>]

On Tue, 12 Jul 2016 10:00:41 -0400, Ted Zlatanov <tzz@lifelogs.com> said:

> I am not aware of any code in Emacs that would modify
> `gnutls-verify-error' and haven't seen this issue. But it could be a
> bug. In particular this line *could* be the cuplrit in gnutls.el:

>     (when verify-hostname-error (push :hostname verify-error))

> Are you able to put a debug statement in there and try again?

I changed those lines to:
    (when verify-hostname-error
      (message "hostname error")
      (push :hostname verify-error))

But there was no extra message in *Messages*.

But then I tried modifying the lambda in the (let* ... (verify-error
...)) expression in gnutls-negotiate to read

                              (lambda (check)
                                (when (string-match (car check) hostname)
                                  (copy-sequence (cdr check))))

(I added the copy-sequence call), and now it seems to be working as it
should, so it looks like *something* in that function is modifying the
value.

> Or give a recipe to duplicate the issue?

For me, just setting the value of gnutls-verify-error to (("muchlearning\\.org"
  (:trustfiles))
 ("news\\.gmane\\.org" nil
  (:trustfiles :hostname))
 (".*"
  (:trustfiles :hostname))), and then accessing news.gmane.org in Gnus
via NNTP over TLS results in the value of gnutls-verify-error changing.

-- 
Hubert Chathi - Email/Jabber: hubert@uhoreg.ca - https://www.uhoreg.ca/
PGP/GnuPG key: 4096R/113A1368 (Key available at pool.sks-keyservers.net)
Fingerprint: F24C F749 6C73 DDB8 DCB8  72DE B2DE 88D3 113A 1368