From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Michael Albinus Newsgroups: gmane.emacs.devel Subject: Re: NSM certificate prompt Date: Sat, 13 Dec 2014 16:27:32 +0100 Message-ID: <87wq5vefiz.fsf@gmx.de> References: <83a92r625n.fsf@gnu.org> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1418484477 2148 80.91.229.3 (13 Dec 2014 15:27:57 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sat, 13 Dec 2014 15:27:57 +0000 (UTC) Cc: emacs-devel@gnu.org To: Eli Zaretskii Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sat Dec 13 16:27:50 2014 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Xzobm-0006Yx-9j for ged-emacs-devel@m.gmane.org; Sat, 13 Dec 2014 16:27:50 +0100 Original-Received: from localhost ([::1]:33448 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Xzobl-0001dl-SY for ged-emacs-devel@m.gmane.org; Sat, 13 Dec 2014 10:27:49 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:55074) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Xzobd-0001dT-IE for emacs-devel@gnu.org; Sat, 13 Dec 2014 10:27:47 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1XzobX-0006Ht-Gi for emacs-devel@gnu.org; Sat, 13 Dec 2014 10:27:41 -0500 Original-Received: from mout.gmx.net ([212.227.17.21]:55099) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XzobX-0006Hh-7d; Sat, 13 Dec 2014 10:27:35 -0500 Original-Received: from detlef.gmx.de ([79.195.17.88]) by mail.gmx.com (mrgmx101) with ESMTPSA (Nemesis) id 0LyR1G-1Xux872Vpm-015u9O; Sat, 13 Dec 2014 16:27:33 +0100 In-Reply-To: <83a92r625n.fsf@gnu.org> (Eli Zaretskii's message of "Sat, 13 Dec 2014 16:43:32 +0200") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.0.50 (gnu/linux) X-Provags-ID: V03:K0:GRoXN1PvM7+94yDUHRTRhTt11JBXjJlvHi+F3RNRoY1/p39UadQ m0vbYGeK0/xUmkmcXtLBImwA61NWjk3Ttg6+rhqL040rh1qiBIogijzDHtd0AzS0WgDCw3F V/QPI6yNCjHfLsznBBHHhvPuV4EA5awRB+yibBw4AfNfMlqnwhg+QRjeMgNuMhvPYSij7md OQUjOEm6Z5RIeM2xiMRMA== X-UI-Out-Filterresults: notjunk:1; X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x [generic] X-Received-From: 212.227.17.21 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:180012 Archived-At: Eli Zaretskii writes: > If I use eww to connect to www.google.com and then click on the "Sign > in" link, I get the following buffer displayed to me by the NSM: > > Certificate information > Issued by: Google Internet Authority G2 > Issued to: Google Inc > Hostname: accounts.google.com > Public key: RSA, signature: RSA-SHA1 > Protocol: TLS1.2, key: ECDHE-RSA, cipher: AES-128-GCM, mac: AEAD > Security level: Medium > Valid: From 2014-12-03 to 2015-03-03 > > > The TLS connection to accounts.google.com:443 is insecure for the > following reasons: > > certificate signer was not found (self-signed) > certificate could not be verified > > This is in Emacs 25.0.50 built with GnuTLS 3.3.11 on MS-Windows. > Other Web browsers on this system don't have any trouble displaying > that page. Do others see this on other systems? Is my system/Emacs > somehow misconfigured wrt certificates? "Other Web browsers" carry builtin certificates. For example if you use Firefox, click on the lock icon heading the url. Click on "More Information". Click on "View Certificate". In the "Details" tab, you'll see that "Google Internet Authority G2" is signed by "GeoTrust Global CA", which is signed by "Equifax Secure CA". The latter one is a builtin certificate Firefox knows about, so it is a valid certificate chain. > TIA Best regards, Michael.