From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Lars Magne Ingebrigtsen Newsgroups: gmane.emacs.bugs Subject: bug#9017: 24.0.50; gnutls.c: [0] (Emacs) fatal error: Key usage violation in certificate has been detected. Date: Sun, 17 Jul 2011 04:19:10 +0200 Message-ID: References: <87ei22yzz3.fsf@niu.edu> <19990.21514.711483.515100@gargle.gargle.HOWL> <19995.450.645561.299970@gargle.gargle.HOWL> <19995.2276.68599.608421@gargle.gargle.HOWL> <19995.3751.825437.128524@gargle.gargle.HOWL> <19995.6586.299315.729607@gargle.gargle.HOWL> <19997.45936.636066.132554@gargle.gargle.HOWL> <19997.49819.733446.452844@gargle.gargle.HOWL> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: dough.gmane.org 1310869537 9839 80.91.229.12 (17 Jul 2011 02:25:37 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Sun, 17 Jul 2011 02:25:37 +0000 (UTC) Cc: 9017@debbugs.gnu.org, Roland Winkler To: Stefan Monnier Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Sun Jul 17 04:25:32 2011 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([140.186.70.17]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1QiH2x-0005hv-PB for geb-bug-gnu-emacs@m.gmane.org; Sun, 17 Jul 2011 04:25:32 +0200 Original-Received: from localhost ([::1]:38330 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1QiH2w-0006d2-QN for geb-bug-gnu-emacs@m.gmane.org; Sat, 16 Jul 2011 22:25:30 -0400 Original-Received: from eggs.gnu.org ([140.186.70.92]:49108) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1QiH2Y-0006YG-Rh for bug-gnu-emacs@gnu.org; Sat, 16 Jul 2011 22:25:08 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1QiH2V-0000aL-UT for bug-gnu-emacs@gnu.org; Sat, 16 Jul 2011 22:25:06 -0400 Original-Received: from debbugs.gnu.org ([140.186.70.43]:47144) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1QiH2V-0000aF-JL for bug-gnu-emacs@gnu.org; Sat, 16 Jul 2011 22:25:03 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.69) (envelope-from ) id 1QiH2V-0002it-GS; Sat, 16 Jul 2011 22:25:03 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Lars Magne Ingebrigtsen Original-Sender: debbugs-submit-bounces@debbugs.gnu.org Resent-To: owner@debbugs.gnu.org Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Sun, 17 Jul 2011 02:25:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 9017 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: Original-Received: via spool by 9017-submit@debbugs.gnu.org id=B9017.131086944310350 (code B ref 9017); Sun, 17 Jul 2011 02:25:03 +0000 Original-Received: (at 9017) by debbugs.gnu.org; 17 Jul 2011 02:24:03 +0000 Original-Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1QiH1X-0002gt-AH for submit@debbugs.gnu.org; Sat, 16 Jul 2011 22:24:03 -0400 Original-Received: from hermes.netfonds.no ([80.91.224.195]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1QiH1U-0002gO-Ps for 9017@debbugs.gnu.org; Sat, 16 Jul 2011 22:24:01 -0400 Original-Received: from cm-84.215.51.58.getinternet.no ([84.215.51.58] helo=quimbies.gnus.org) by hermes.netfonds.no with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1QiH1J-00007a-BB; Sun, 17 Jul 2011 04:23:49 +0200 In-Reply-To: (Stefan Monnier's message of "Sat, 16 Jul 2011 13:57:56 -0400") User-Agent: Gnus/5.110018 (No Gnus v0.18) Emacs/24.0.50 (gnu/linux) Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAHlBMVEX47tXQ09wVDg0/LSW4 wdCIk7SRcWpXQjSXq891VUNKEkZ8AAACKklEQVQ4jXWSMW/bMBCFKcAOshJxh2yBNGQNxIHIZieM a29OGyoe3dY6R1tQISC0dbACjQUaW+W/7R1JOxLaPkkUdR+f7o4SY6gFi+jGhmPW08la+Ynqxz/k 0TgaLMZsOpp0wqevep3v4O3uN+RTnWUasiwDNWZD/ahfdK61zjQJcp1nerdA8OICunFDs2xQtUbg Fi6beuljug9QddMRAVxee1NHtQO4IAPogYYAOTVA/h+w/wssqQh9fJWaudsPNnQGTKKbrcI4yoNT VzZ1DE9KPxAgkwcNVgyoGpnyngBq7QDA00RxIq8rD1wjpAfOCczMFYGtmh3AhJNGc0HApSOwghMP +EcCW6XQfgewHrNBcGwQDCiO8yms8aN7w7RFMAwPfMQZC9N5mV6wM7kjv/8BIs7x5I8CHTexuL7v /TUR/5zGFwjiWNp1l/BfaeqBKOWX9/igKOPgEFJcwgFFGyNEAEkqEnH9pqgT0G0ae0eaJjSVxhib FcbSQ3A4JUbKsjXCdEDigCBJU3YdSWUtQLG3tMNfPbjFRRa6sq2hPs73/SgUYAvbPrNze1SB175w 0/Ynm4co1uoieGFCdNxin6UwpJaGClMYAjdYZyiV5FYYa559uRTCbcEmDHaIcQSfXNuCOhd4lCWN AVTf46RMLjcCnZVP5IFPIvEwsqoqS+gqvIq2PqYc0tAulyLkSA+lUQ6nANy+QpGDj5ZHQJLwDQCL pl4ITOGfWv0B16JWP1UVP5kAAAAASUVORK5CYII= X-Now-Playing: Tuxedomoon's _Holy Wars_ X-Hashcash: 1:23:110717:9017@debbugs.gnu.org::RgOhnpDjXn5D+ILM:00000000000000000000000000000000000000000B3j6 X-Hashcash: 1:23:110717:winkler@gnu.org::luMUjlhYGE/MpX2X:00L3nO X-Hashcash: 1:23:110717:monnier@iro.umontreal.ca::XzQahWzgynHD/UYs:0000000000000000000000000000000000000Um6T X-MailScanner-ID: 1QiH1J-00007a-BB MailScanner-NULL-Check: 1311474229.43841@leMot8Bs0ptDLApuTjF/wg X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list Resent-Date: Sat, 16 Jul 2011 22:25:03 -0400 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 3) X-Received-From: 140.186.70.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:49312 Archived-At: Stefan Monnier writes: >> (setq starttls-extra-arguments '("--priority" "normal:-dhe-rsa")) > > I presume that users of MUAs like Outlook don't need to go through so > much trouble, so it should be possible for Emacs to similarly find the > magic incantation without the user having to get into such details. You'd hope. But when researching the error message this user got, I found the same error message from a Thunderbird user, I think it was. The problem is basically a somewhat invalid certificate being served up by the server. The recommended way to fix that is to fix the server. But, yes, I hope we can do better. If one cipher (or whatever this is :-) fails, why not try the other ones automatically instead of failing completely? You'd imagine that would be doable... -- (domestic pets only, the antidote for overdose, milk.) bloggy blog http://lars.ingebrigtsen.no/