From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED.blaine.gmane.org!not-for-mail From: Yuji Nakao Newsgroups: gmane.emacs.help Subject: Network Security Manager warns safe renegotiation is not supported Date: Sun, 01 Sep 2019 08:23:40 +0900 Message-ID: <87zhjoj4w3.fsf@yujinakao.com> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=-=-=" Injection-Info: blaine.gmane.org; posting-host="blaine.gmane.org:195.159.176.226"; logging-data="204650"; mail-complaints-to="usenet@blaine.gmane.org" To: help-gnu-emacs@gnu.org Original-X-From: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Sun Sep 01 02:24:13 2019 Return-path: Envelope-to: geh-help-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([209.51.188.17]) by blaine.gmane.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1i4DfB-000r5Y-Bs for geh-help-gnu-emacs@m.gmane.org; Sun, 01 Sep 2019 02:24:13 +0200 Original-Received: from localhost ([::1]:46834 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1i4Df8-00008w-9Y for geh-help-gnu-emacs@m.gmane.org; Sat, 31 Aug 2019 20:24:11 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:53569) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1i4Cio-0000fA-2R for help-gnu-emacs@gnu.org; Sat, 31 Aug 2019 19:23:55 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1i4Cil-0006pC-3g for help-gnu-emacs@gnu.org; Sat, 31 Aug 2019 19:23:52 -0400 Original-Received: from mail.yujinakao.com ([107.191.43.40]:45924) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1i4Cik-0006gy-Vs for help-gnu-emacs@gnu.org; Sat, 31 Aug 2019 19:23:51 -0400 Original-Received: from localhost (p576171-omed01.tokyo.ocn.ne.jp [153.154.127.171]) by mail.yujinakao.com (Postfix) with ESMTPSA id 9EFA17F644 for ; Sat, 31 Aug 2019 23:23:44 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=yujinakao.com; s=201707; t=1567293825; bh=TC8K7rH9twaJk1Vcuq2DpoLFxLwg5Td/dQk2+mtLTxo=; h=From:To:Subject:Date:From; b=KAPFtGy8SjnXkwWHcO7jOoBQ1ZRFWZXJIk4KgNWkmU775WOXXRViBIL0MBaR/01ML iqW6TO4vdeSN0Y1/kygur+5o66pxEnKVazaXf00BLDcWqSyRuWHw1ab+T9QMaDi5WC ftp/Ve2GM5POeSKvQcfKHheTt6xKoIPrBalufSL/CFley87KMUgtV3eBgQK1mdyGw1 LifJ1fm0zwElKOJIc+UiljMD8So6U6K0bvGL+2tRi3CQsWWkqrtpsKuAUGuB1MN7ov /VmDUBpTBsi3L+W/6hHBKFOLJeb+NMSon6X2j+rL3s3peuPhL8bf1sRxXahK5ZnfLF NJ8rFuvYWCyJw== X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 107.191.43.40 X-Mailman-Approved-At: Sat, 31 Aug 2019 20:23:58 -0400 X-BeenThere: help-gnu-emacs@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Users list for the GNU Emacs text editor List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "help-gnu-emacs" Xref: news.gmane.org gmane.emacs.help:121399 Archived-At: --=-=-= Content-Type: text/plain Hi, I tried to connect to https://elpa.gnu.org in eww Emacs 27.0.50, but Network Security Manager warned `TLS connection to elpa.gnu.org:433 is insecure for the following reason: * safe renegotiation is not supported, connection not protected from impersonators`, and showed `Continue connecting?` multiple choice prompt whether to accept the certificate. I guess this is caused by recently merged nsm.el, and after some investigation, the warning disaapeared by setting (setq gnutls-algorithm-priority "NORMAL:-VERS-TLS1.3"). Is this a right workaround for this issue? Thanks. Yuji Nakao --=-=-= Content-Type: multipart/signed; boundary="==-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" --==-=-= Content-Type: text/plain --==-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEpKtqRosy3MDvD1mv2ey2j4iz4jUFAl1rAXwACgkQ2ey2j4iz 4jURygf+OhwEpxqCSegeVapkVUx94TNwcCzdiki3GwhmSzR4TuVk0XSJqPjudkTI d4/bD54RLZ5yVrPQICLiKGweroswuIRk5uUFbhGTd5CRn2xg9hbGjbZoviSVp+TV k/x6bjAfzGGlCky6+5ysH9waJK8cjiHGhlCq2N4fYQnJByMrEZ2f+iEywhMxvWC8 skMyI2QqRdmzIaRpHy978Dm49pG01Vn1/2Rvu3CWgbYW7J0OSYeGA8p+heFJpMrF rDfSaddNmD9WuEhrfWIg4l01RTTwyMvkZQEq29+m8xDrgZ9TDCiFiT49+tqYAOUN mQj8RVaFx97x+u4Whf8J8Z0UTLG0cg== =obdk -----END PGP SIGNATURE----- --==-=-=-- --=-=-=--