From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED.blaine.gmane.org!not-for-mail From: Jude DaShiell Newsgroups: gmane.emacs.help Subject: Re: Network Security Manager warns safe renegotiation is not supported Date: Sun, 1 Sep 2019 11:38:45 -0400 Message-ID: References: <87zhjoj4w3.fsf@yujinakao.com> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=-=-=" Injection-Info: blaine.gmane.org; posting-host="blaine.gmane.org:195.159.176.226"; logging-data="19177"; mail-complaints-to="usenet@blaine.gmane.org" To: Yuji Nakao , help-gnu-emacs@gnu.org Original-X-From: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Sun Sep 01 17:41:46 2019 Return-path: Envelope-to: geh-help-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([209.51.188.17]) by blaine.gmane.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1i4Rz6-0004qc-P3 for geh-help-gnu-emacs@m.gmane.org; Sun, 01 Sep 2019 17:41:44 +0200 Original-Received: from localhost ([::1]:58238 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1i4Rz5-0006k6-4V for geh-help-gnu-emacs@m.gmane.org; Sun, 01 Sep 2019 11:41:43 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:48995) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1i4RwG-0005s1-R2 for help-gnu-emacs@gnu.org; Sun, 01 Sep 2019 11:38:50 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1i4RwE-0000GO-Nu for help-gnu-emacs@gnu.org; Sun, 01 Sep 2019 11:38:48 -0400 Original-Received: from mailbackend.panix.com ([166.84.1.89]:45008) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1i4RwE-0000Fv-Ki for help-gnu-emacs@gnu.org; Sun, 01 Sep 2019 11:38:46 -0400 Original-Received: from panix1.panix.com (panix1.panix.com [166.84.1.1]) by mailbackend.panix.com (Postfix) with ESMTP id 46Ly6t0V0pz151V; Sun, 1 Sep 2019 11:38:45 -0400 (EDT) Original-Received: by panix1.panix.com (Postfix, from userid 20712) id 46Ly6s6DlqzcbR; Sun, 1 Sep 2019 11:38:45 -0400 (EDT) Original-Received: from localhost (localhost [127.0.0.1]) by panix1.panix.com (Postfix) with ESMTP id 46Ly6s5vFTzcbQ; Sun, 1 Sep 2019 11:38:45 -0400 (EDT) In-Reply-To: <87zhjoj4w3.fsf@yujinakao.com> X-detected-operating-system: by eggs.gnu.org: GNU/Linux (Android) X-Received-From: 166.84.1.89 X-BeenThere: help-gnu-emacs@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Users list for the GNU Emacs text editor List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "help-gnu-emacs" Xref: news.gmane.org gmane.emacs.help:121404 Archived-At: This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. --=-=-= Content-Type: text/plain; charset=US-ASCII Until I put that line in my .emacs file eww wouldn't even connect to google. On Sun, 1 Sep 2019, Yuji Nakao wrote: > Date: Sat, 31 Aug 2019 19:23:40 > From: Yuji Nakao > To: help-gnu-emacs@gnu.org > Subject: Network Security Manager warns safe renegotiation is not supported > > Hi, I tried to connect to https://elpa.gnu.org in eww Emacs 27.0.50, but > Network Security Manager warned `TLS connection to elpa.gnu.org:433 is > insecure for the following reason: * safe renegotiation is not > supported, connection not protected from impersonators`, and showed > `Continue connecting?` multiple choice prompt whether to accept the > certificate. > > I guess this is caused by recently merged nsm.el, and > after some investigation, the warning disaapeared by setting > (setq gnutls-algorithm-priority "NORMAL:-VERS-TLS1.3"). > Is this a right workaround for this issue? > > Thanks. > Yuji Nakao > -- --=-=-= Content-Type: multipart/signed; boundary="==-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Content-Description: This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. --==-=-= Content-Type: text/plain; charset=us-ascii --==-=-= Content-Type: application/pgp-signature; name=signature.asc -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEpKtqRosy3MDvD1mv2ey2j4iz4jUFAl1rAXwACgkQ2ey2j4iz 4jURygf+OhwEpxqCSegeVapkVUx94TNwcCzdiki3GwhmSzR4TuVk0XSJqPjudkTI d4/bD54RLZ5yVrPQICLiKGweroswuIRk5uUFbhGTd5CRn2xg9hbGjbZoviSVp+TV k/x6bjAfzGGlCky6+5ysH9waJK8cjiHGhlCq2N4fYQnJByMrEZ2f+iEywhMxvWC8 skMyI2QqRdmzIaRpHy978Dm49pG01Vn1/2Rvu3CWgbYW7J0OSYeGA8p+heFJpMrF rDfSaddNmD9WuEhrfWIg4l01RTTwyMvkZQEq29+m8xDrgZ9TDCiFiT49+tqYAOUN mQj8RVaFx97x+u4Whf8J8Z0UTLG0cg== =obdk -----END PGP SIGNATURE----- --==-=-=-- --=-=-=--