GNU bug report logs - #20960
handling /etc/ssl/certs/ca-bundle.crt by default in emacs

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.

Package: emacs; Severity: wishlist; Reported by: Petr Hracek <phracek@HIDDEN>; dated Thu, 2 Jul 2015 09:58:02 UTC; Maintainer for emacs is bug-gnu-emacs@HIDDEN.

Message received at 20960 <at> debbugs.gnu.org:


Received: (at 20960) by debbugs.gnu.org; 31 Jan 2017 18:45:27 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Tue Jan 31 13:45:27 2017
Received: from localhost ([127.0.0.1]:52550 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1cYdQh-0000eY-LB
	for submit <at> debbugs.gnu.org; Tue, 31 Jan 2017 13:45:27 -0500
Received: from mail-qt0-f182.google.com ([209.85.216.182]:35443)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <tzz@HIDDEN>) id 1cYdQd-0000eK-KI
 for 20960 <at> debbugs.gnu.org; Tue, 31 Jan 2017 13:45:23 -0500
Received: by mail-qt0-f182.google.com with SMTP id x49so241378858qtc.2
 for <20960 <at> debbugs.gnu.org>; Tue, 31 Jan 2017 10:45:19 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lifelogs.com; s=google;
 h=from:to:cc:subject:organization:references:mail-copies-to
 :gmane-reply-to-list:date:in-reply-to:message-id:user-agent
 :mime-version; bh=aZCWZwIUTMw+Uu2l2KxpAoTfovVx6B8BvaCor4NeGFQ=;
 b=GJM4By+6G9TGTo5dYmrBT72M8sm4Ax2eFN+Ug4cjqFN0sbm0kMHtVcdJ7oZ4Jgf8bW
 Il+qXgKfLnjYJdj3YbmskR7H1RESXiVSUxWwr5EsxfwM8wWrIw3zvor3K0H3Blwm6PZH
 r1Z8PgGN9SQwY4YMF5gvxD90A2IVRuiX5FyFI=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:from:to:cc:subject:organization:references
 :mail-copies-to:gmane-reply-to-list:date:in-reply-to:message-id
 :user-agent:mime-version;
 bh=aZCWZwIUTMw+Uu2l2KxpAoTfovVx6B8BvaCor4NeGFQ=;
 b=AJUlVg+ZRO/BloCJ5o5/g3JUM2H9XHIR9bQArRZLONaSTMzOeX62PE0jf91iaxwSSy
 yVeScZFhtZYlN41udyDi5rJN3ZYguYwrwjVCKDPtAUpIpEJLWzneauGxXevx0IJ0/xGl
 yw5SHYibO1O8jRorVsGL35NWTYa/2YHYqNZ2kSa+6T2u7rf7GSuBjFi8bHd17mTVoiGZ
 5hiU8RtO6w6Vh5m2lllxV4nNcL+vFV88cf9eY0H+bZrM/hLn3b4kkDzIrhuS1ifKigg/
 mQxFyr/v8Fe5CLMg4ARKxi5jTzH8IKl0ACat6cWeCVj8TWIQV1FJkuk+5eQknBSPSTgo
 yqcA==
X-Gm-Message-State: AIkVDXIsGz6exNyaVFCDlpuDxxg2YYr4+sEuUcx/I5DURhXR7mG7gCVpBkWHOWmc9rQywg==
X-Received: by 10.200.50.18 with SMTP id x18mr28813737qta.58.1485888313938;
 Tue, 31 Jan 2017 10:45:13 -0800 (PST)
Received: from flea (c-98-229-60-157.hsd1.ma.comcast.net. [98.229.60.157])
 by smtp.gmail.com with ESMTPSA id 23sm16107931qtp.20.2017.01.31.10.45.12
 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256);
 Tue, 31 Jan 2017 10:45:13 -0800 (PST)
From: Ted Zlatanov <tzz@HIDDEN>
To: Lars Ingebrigtsen <larsi@HIDDEN>
Subject: Re: bug#20960: handling /etc/ssl/certs/ca-bundle.crt by default in
 emacs
Organization: =?utf-8?B?0KLQtdC+0LTQvtGAINCX0LvQsNGC0LDQvdC+0LI=?= @ Cienfuegos
References: <55950B13.1040406@HIDDEN> <83d20a1udy.fsf@HIDDEN>
 <cr4mlmtvri.fsf@HIDDEN>
 <jwvr3oqttme.fsf-monnier+emacsbugs@HIDDEN> <87wps1orm3.fsf@HIDDEN>
 <87oada1bbz.fsf@HIDDEN> <87efzpr5en.fsf@HIDDEN>
 <87mve7nvli.fsf@HIDDEN> <m3bmunnqib.fsf@stories>
X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6;
 d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT=
 D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx"
Mail-Copies-To: never
Gmane-Reply-To-List: yes
Date: Tue, 31 Jan 2017 13:45:12 -0500
In-Reply-To: <m3bmunnqib.fsf@stories> (Lars Ingebrigtsen's message of "Tue, 31
 Jan 2017 17:27:56 +0100")
Message-ID: <87fujzt6fb.fsf@flea>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: -0.2 (/)
X-Debbugs-Envelope-To: 20960
Cc: 20960 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.2 (/)

On Tue, 31 Jan 2017 17:27:56 +0100 Lars Ingebrigtsen <larsi@HIDDEN> wrote: 

LI> Ted Zlatanov <tzz@HIDDEN> writes:

>> I'm lost. Should we support directories or not?

LI> Because of the way the inputs for the smime commands are structured,
LI> making gnutls-trustfiles support directories doesn't help us.  I think.
LI> I may be misreading the man pages or having a brain fart.  :-)

Since it's less work, I concur and procrastination wins again.

Ted




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#20960; Package emacs. Full text available.

Message received at 20960 <at> debbugs.gnu.org:


Received: (at 20960) by debbugs.gnu.org; 31 Jan 2017 16:28:10 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Tue Jan 31 11:28:10 2017
Received: from localhost ([127.0.0.1]:52411 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1cYbHr-0007Qs-1m
	for submit <at> debbugs.gnu.org; Tue, 31 Jan 2017 11:28:10 -0500
Received: from hermes.netfonds.no ([80.91.224.195]:38553)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <larsi@HIDDEN>) id 1cYbHl-0007QP-91
 for 20960 <at> debbugs.gnu.org; Tue, 31 Jan 2017 11:28:04 -0500
Received: from cm-84.215.1.64.getinternet.no ([84.215.1.64] helo=stories)
 by hermes.netfonds.no with esmtpsa (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
 (Exim 4.84_2) (envelope-from <larsi@HIDDEN>) id 1cYbHg-0000dR-SM
 for 20960 <at> debbugs.gnu.org; Tue, 31 Jan 2017 17:28:00 +0100
From: Lars Ingebrigtsen <larsi@HIDDEN>
To: 20960 <at> debbugs.gnu.org
Subject: Re: bug#20960: handling /etc/ssl/certs/ca-bundle.crt by default in
 emacs
References: <55950B13.1040406@HIDDEN> <83d20a1udy.fsf@HIDDEN>
 <cr4mlmtvri.fsf@HIDDEN>
 <jwvr3oqttme.fsf-monnier+emacsbugs@HIDDEN> <87wps1orm3.fsf@HIDDEN>
 <87oada1bbz.fsf@HIDDEN> <87efzpr5en.fsf@HIDDEN>
 <87mve7nvli.fsf@HIDDEN>
Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAKlBMVEWB/v4AAOAAAOMIMfsL
 e/wFBvo88/0HrP0AAO0IFvsBAN0LUfoAAOgAAP9eAcMbAAABpklEQVQ4jX3SMWuDQBQH8Df1Q5Qu
 3ULJdukQHBWkZHaQInQIly8guSFTAgWHZgo3HCFDnIpkM5Dh6JBNAp2CoIPfpXfR04sxfYN4/rh7
 /6dCJKsfJEFTc/kI5CX5TAutsnkFYZAzxuiQMsqYp8FueY45H3EzNkeDH7FFwdMyd1zHocylrtxR
 fD2WkHjFdWUlhEnRhpcLBMsbON2Do4RtcguLCwTt50VxgX47k8wrodcBIi9EidMBzxK6dhwj2AZd
 MI/gdu4yFoQdaWUs2N2M9y9kp3twhKiGVIuXzSH6VQvGGkgXDeQIsWJTd2+OWhlChg2EFaSIc4TQ
 poZvdZLBRcWqT1DDmVuWALUlg55qIUAQeq1OBvUO1/sSaLWuwbBsX7Svh1GQ723iu3EzIqgx1gKQ
 Dl51807IzDA1UKHsKZntzU0HYDzej2gDVQ82wBhPfR7TFhjGVMjkQKzhNQx8LIsQK/Z0cA53wLUJ
 /gDAY2KZeqqcCgCAhwnxTU+DtLAa2Ohz5Pb0Atj233RwnEM3MHbAJRA/1mHF7RqqjwvyZ09RXAJg
 X8EfRu0wFrq2O7cAAAAASUVORK5CYII=
Date: Tue, 31 Jan 2017 17:27:56 +0100
In-Reply-To: <87mve7nvli.fsf@HIDDEN> (Ted Zlatanov's message of "Tue, 31
 Jan 2017 09:38:01 -0500")
Message-ID: <m3bmunnqib.fsf@stories>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 20960
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.0 (/)

Ted Zlatanov <tzz@HIDDEN> writes:

> On Thu, 26 Jan 2017 20:24:16 +0100 Lars Ingebrigtsen <larsi@HIDDEN> wrote: 
>
> LI> Is a list of CA files, and can be in different directories, so there's,
> LI> like, no way to used them interchangeably.
>
> LI> So...  I dunno.  Somebody could just rewrite that function to use all
> LI> the files from (gnutls-trustfiles) and see if one of them are OK.  I
> LI> never use smime, though, so I'm not that person.
>
> I'm lost. Should we support directories or not?

Because of the way the inputs for the smime commands are structured,
making gnutls-trustfiles support directories doesn't help us.  I think.
I may be misreading the man pages or having a brain fart.  :-)

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#20960; Package emacs. Full text available.

Message received at 20960 <at> debbugs.gnu.org:


Received: (at 20960) by debbugs.gnu.org; 31 Jan 2017 14:38:17 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Tue Jan 31 09:38:17 2017
Received: from localhost ([127.0.0.1]:51839 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1cYZZV-0004iL-Sa
	for submit <at> debbugs.gnu.org; Tue, 31 Jan 2017 09:38:17 -0500
Received: from mail-qk0-f170.google.com ([209.85.220.170]:36760)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <tzz@HIDDEN>) id 1cYZZR-0004i4-1w
 for 20960 <at> debbugs.gnu.org; Tue, 31 Jan 2017 09:38:12 -0500
Received: by mail-qk0-f170.google.com with SMTP id 11so165391084qkl.3
 for <20960 <at> debbugs.gnu.org>; Tue, 31 Jan 2017 06:38:09 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lifelogs.com; s=google;
 h=from:to:cc:subject:organization:references:mail-copies-to
 :gmane-reply-to-list:date:in-reply-to:message-id:user-agent
 :mime-version; bh=KAPQtw8cljt584xRGQuna5HX/4vHse0ryBkpgRQBEyE=;
 b=Cmqo4NBbghl4xeQvAqTyVyZtU4auPdpuLr3TBVgoPO5WVZGsheVdFZcThFHOqfPa3n
 hLXUQkWRv7pRuqhvwJ2ZuTyddyLnbDJMOyAJYXwhlqa+pr+XpThMZtJlfqyrYEhFNVdm
 t2o79eK/ls7G+EPs4GW3HtXgDt+xAe61hZonU=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:from:to:cc:subject:organization:references
 :mail-copies-to:gmane-reply-to-list:date:in-reply-to:message-id
 :user-agent:mime-version;
 bh=KAPQtw8cljt584xRGQuna5HX/4vHse0ryBkpgRQBEyE=;
 b=T3Avk7xr/Q48R0ifC+WytzeYRxW7Wwa9wHfq0cpJEEf+iOmOr633xEkyXIFJ49pDMz
 +EyB6TWRirIAhFHgd/GzPZohaOAowk/E0ec/UCv53S8TeGapVa0VHAnhUMn23PVHUuXR
 UrbjTLohIWLTWW0ERqkV7iJ+L8QQ7kx1NCzEWKydJ640DG2ZYMpK6u+DBVyp6a3mMguh
 CuJapEEW9dM/sSD8/g1Ho2ke8tSHBjACZVqtGo+bfF+oMud9Sf/1tyAuvt/vthoZ66HG
 taRcEhA3mw3/qCg297oCco2MPhMOR3kr5drJftOsoE6JUXz2SuqGgsK1gpE1eJje7FU4
 gJag==
X-Gm-Message-State: AIkVDXKogIfecc+UrMpx3W1jv7IAokX11O0ArL/0mC8sLP12b93dPTOUOUUhqjKaxHyE9w==
X-Received: by 10.55.24.8 with SMTP id j8mr29695117qkh.181.1485873483503;
 Tue, 31 Jan 2017 06:38:03 -0800 (PST)
Received: from flea (c-98-229-60-157.hsd1.ma.comcast.net. [98.229.60.157])
 by smtp.gmail.com with ESMTPSA id t2sm15464896qte.14.2017.01.31.06.38.02
 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256);
 Tue, 31 Jan 2017 06:38:02 -0800 (PST)
From: Ted Zlatanov <tzz@HIDDEN>
To: Lars Ingebrigtsen <larsi@HIDDEN>
Subject: Re: bug#20960: handling /etc/ssl/certs/ca-bundle.crt by default in
 emacs
Organization: =?utf-8?B?0KLQtdC+0LTQvtGAINCX0LvQsNGC0LDQvdC+0LI=?= @ Cienfuegos
References: <55950B13.1040406@HIDDEN> <83d20a1udy.fsf@HIDDEN>
 <cr4mlmtvri.fsf@HIDDEN>
 <jwvr3oqttme.fsf-monnier+emacsbugs@HIDDEN> <87wps1orm3.fsf@HIDDEN>
 <87oada1bbz.fsf@HIDDEN> <87efzpr5en.fsf@HIDDEN>
X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6;
 d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT=
 D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx"
Mail-Copies-To: never
Gmane-Reply-To-List: yes
Date: Tue, 31 Jan 2017 09:38:01 -0500
In-Reply-To: <87efzpr5en.fsf@HIDDEN> (Lars Ingebrigtsen's message of "Thu,
 26 Jan 2017 20:24:16 +0100")
Message-ID: <87mve7nvli.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: -0.2 (/)
X-Debbugs-Envelope-To: 20960
Cc: 20960 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.2 (/)

On Thu, 26 Jan 2017 20:24:16 +0100 Lars Ingebrigtsen <larsi@HIDDEN> wrote: 

LI> Is a list of CA files, and can be in different directories, so there's,
LI> like, no way to used them interchangeably.

LI> So...  I dunno.  Somebody could just rewrite that function to use all
LI> the files from (gnutls-trustfiles) and see if one of them are OK.  I
LI> never use smime, though, so I'm not that person.

I'm lost. Should we support directories or not?

Ted




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#20960; Package emacs. Full text available.
bug reassigned from package 'emacs,gnus' to 'emacs'. Request was from Lars Ingebrigtsen <larsi@HIDDEN> to control <at> debbugs.gnu.org. Full text available.

Message received at 20960 <at> debbugs.gnu.org:


Received: (at 20960) by debbugs.gnu.org; 26 Jan 2017 19:25:31 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Thu Jan 26 14:25:31 2017
Received: from localhost ([127.0.0.1]:46017 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1cWpfk-0003w6-CX
	for submit <at> debbugs.gnu.org; Thu, 26 Jan 2017 14:25:31 -0500
Received: from hermes.netfonds.no ([80.91.224.195]:56714)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <larsi@HIDDEN>) id 1cWpff-0003vv-Ik
 for 20960 <at> debbugs.gnu.org; Thu, 26 Jan 2017 14:25:27 -0500
Received: from 2.150.50.220.tmi.telenormobil.no ([2.150.50.220] helo=mouse)
 by hermes.netfonds.no with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <larsi@HIDDEN>) id 1cWpfb-0000jK-HY
 for 20960 <at> debbugs.gnu.org; Thu, 26 Jan 2017 20:25:23 +0100
From: Lars Ingebrigtsen <larsi@HIDDEN>
To: 20960 <at> debbugs.gnu.org
Subject: Re: bug#20960: handling /etc/ssl/certs/ca-bundle.crt by default in
 emacs
In-Reply-To: <87oada1bbz.fsf@HIDDEN> (Ted Zlatanov's message of "Mon, 28
 Dec 2015 17:02:08 -0500")
Date: Thu, 26 Jan 2017 20:24:16 +0100
Message-ID: <87efzpr5en.fsf@HIDDEN>
References: <55950B13.1040406@HIDDEN> <83d20a1udy.fsf@HIDDEN>
 <cr4mlmtvri.fsf@HIDDEN>
 <jwvr3oqttme.fsf-monnier+emacsbugs@HIDDEN> <87wps1orm3.fsf@HIDDEN>
 <87oada1bbz.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 20960
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.0 (/)

Ted Zlatanov <tzz@HIDDEN> writes:

> On Sat, 26 Dec 2015 21:57:24 +0100 Lars Ingebrigtsen <larsi@HIDDEN> wrote: 
>
> LI> Stefan Monnier <monnier@HIDDEN> writes:
>>>> that exists, similar to what gnutls-trustfiles does. (Do these two
>>>> variables duplicate each other?)
>>> 
>>> Yes, I believe they are duplicates (with smime-CA-directory predating
>>> the gnutls thingy).
>
> LI> smime-CA-directory should be rewritten to use gnutls-trustfiles (if
> LI> gnutls-trustfiles exists).  The minor complication is that the former is
> LI> a directory and the latter is a list of files, so it wouldn't be exactly
> LI> backwards compatible...
>
> We can make `gnutls-trustfiles' support directories?

On the other hand, this is the only place smime-CA-directory is used:

(defun smime-verify-region (b e)
  "Verify S/MIME message in region between B and E.
Returns non-nil on success.
Any details (stdout and stderr) are left in the buffer specified by
`smime-details-buffer'."
  (smime-new-details-buffer)
  (let ((CAs (append (if smime-CA-file
			 (list "-CAfile"
			       (expand-file-name smime-CA-file)))
		     (if smime-CA-directory
			 (list "-CApath"
			       (expand-file-name smime-CA-directory))))))

And:

       -CAfile file
           a file containing trusted CA certificates, only used with -verify.

       -CApath dir
           a directory containing trusted CA certificates, only used with
           -verify. This directory must be a standard certificate directory:
           that is a hash of each subject name (using x509 -hash) should be
           linked to each certificate.

Is a list of CA files, and can be in different directories, so there's,
like, no way to used them interchangeably.

So...  I dunno.  Somebody could just rewrite that function to use all
the files from (gnutls-trustfiles) and see if one of them are OK.  I
never use smime, though, so I'm not that person.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no




Information forwarded to bug-gnu-emacs@HIDDEN, bugs@HIDDEN:
bug#20960; Package emacs,gnus. Full text available.

Message received at 20960 <at> debbugs.gnu.org:


Received: (at 20960) by debbugs.gnu.org; 31 Dec 2015 17:12:18 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Thu Dec 31 12:12:18 2015
Received: from localhost ([127.0.0.1]:51902 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1aEglt-0004XQ-ST
	for submit <at> debbugs.gnu.org; Thu, 31 Dec 2015 12:12:18 -0500
Received: from hermes.netfonds.no ([80.91.224.195]:51708)
 by debbugs.gnu.org with esmtp (Exim 4.84)
 (envelope-from <larsi@HIDDEN>) id 1aEglr-0004XI-Uj
 for 20960 <at> debbugs.gnu.org; Thu, 31 Dec 2015 12:12:16 -0500
Received: from cm-84.215.1.64.getinternet.no ([84.215.1.64] helo=stories)
 by hermes.netfonds.no with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16)
 (Exim 4.72) (envelope-from <larsi@HIDDEN>)
 id 1aEglW-0006vt-3L; Thu, 31 Dec 2015 18:11:54 +0100
From: Lars Magne Ingebrigtsen <larsi@HIDDEN>
To: Stefan Monnier <monnier@HIDDEN>
Subject: Re: bug#20960: handling /etc/ssl/certs/ca-bundle.crt by default in
 emacs
References: <55950B13.1040406@HIDDEN> <83d20a1udy.fsf@HIDDEN>
 <cr4mlmtvri.fsf@HIDDEN>
 <jwvr3oqttme.fsf-monnier+emacsbugs@HIDDEN> <87wps1orm3.fsf@HIDDEN>
 <87oada1bbz.fsf@HIDDEN> <87y4ceqk9e.fsf@HIDDEN>
 <87si2kyomv.fsf@HIDDEN>
Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAHlBMVEXyAADrHhDqJBIA//wA
 ///3CQTQPSj/AADiKxhepporinpyAAACQElEQVQ4jX3UvXObMBQAcE/dIWcgo96dBR3buB+Z7cWj
 23PibhVpJTxCD0kZUc+CrkkJzn9bJNnYTu76Bh/SD554T8Kjqz6+j2wIMTrEm6vRvI/P4lU8WljY
 a6mS8QD3FubMXPOAkgFKB50FTNLbQQaI+sG2XL0E3macke5pw266M5DPt0XLntpH1oanwPhzxylr
 n0m3YydwfcvbXbZh3YbuHlYn0AreluyCdHnwjbR2/tLAwr0kN/deZq4M25KPrztyPx8dyjuPvwZm
 JtP2bJ7PDZgWyiCrqvAk0wEKqrK1Jl/Q2FuegVwXkKIaKcB+n/nXADz1IfUFUokH4hTk2K+IDqXy
 Ym9INTNPCIV1+mJxB5ruJ2WTEX4EeWP7IhktCImPkCf7m+vGB4hzB/sdyGVFMqIVhVhMj71aRzRH
 sC1w86eauF7N35UowSrRywlWGxy9nYD4YWEhINJVgmsWkrvkARSIrwfAEWmCn3UAcfEAAPv9WIjV
 0kt0lsUJnsgUYFsfwIVX+7gu+q7hrYP3ZhaZ3WhwLVNMtw5cHZWq+l+qlcIBc2vYTDl40Hclp32i
 phG/DXyw4KGx2QlOARq9sgXawn1/6Y2D0GyZQrFre20AElWg0FxGYyTuDNjTI1Cicl9rbd4t7Ftl
 nrCnpi+38BVQbV4xn1pgAwBQzNx5OwMECTRmJB10bnEoNNYkM2e1nB6hiSoZKQT+xIxO4OVh/y98
 cgMeBF6ztkX1O2vg8BdTlmK1/zIvephdXb9Oxeezf80zqEK2PzPKAAAAAElFTkSuQmCC
Date: Thu, 31 Dec 2015 18:11:53 +0100
In-Reply-To: <87si2kyomv.fsf@HIDDEN> (Ted Zlatanov's message of "Wed, 30
 Dec 2015 09:52:56 -0500")
Message-ID: <m34meytuee.fsf@HIDDEN>
User-Agent: Gnus/5.130014 (Ma Gnus v0.14) Emacs/25.1.50 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-MailScanner-ID: 1aEglW-0006vt-3L
X-Netfonds-MailScanner: Found to be clean
X-Netfonds-MailScanner-From: larsi@HIDDEN
MailScanner-NULL-Check: 1452186714.52603@BUL/WZFgkCxEi4Pa5DBm9A
X-Spam-Status: No
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 20960
Cc: 20960 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.7 (/)

Ted Zlatanov <tzz@HIDDEN> writes:

> Would it be enough to use `directory-files' with the .pem and .crt
> extensions, case-insensitively? Should it be recursive?

Hm...  I don't know whether it should be recursive, but if it should,
that's easy with `directory-files-recursively'.  :-)

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no




Information forwarded to bug-gnu-emacs@HIDDEN, bugs@HIDDEN:
bug#20960; Package emacs,gnus. Full text available.

Message received at 20960 <at> debbugs.gnu.org:


Received: (at 20960) by debbugs.gnu.org; 30 Dec 2015 14:53:11 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Wed Dec 30 09:53:11 2015
Received: from localhost ([127.0.0.1]:49442 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1aEI7f-0004Iw-RO
	for submit <at> debbugs.gnu.org; Wed, 30 Dec 2015 09:53:11 -0500
Received: from mail-qk0-f181.google.com ([209.85.220.181]:33785)
 by debbugs.gnu.org with esmtp (Exim 4.84)
 (envelope-from <tzz@HIDDEN>) id 1aEI7b-0004IR-KO
 for 20960 <at> debbugs.gnu.org; Wed, 30 Dec 2015 09:53:07 -0500
Received: by mail-qk0-f181.google.com with SMTP id p186so13583163qke.0
 for <20960 <at> debbugs.gnu.org>; Wed, 30 Dec 2015 06:53:03 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lifelogs.com; s=google;
 h=from:to:cc:subject:organization:references:mail-copies-to
 :gmane-reply-to-list:date:in-reply-to:message-id:user-agent
 :mime-version:content-type;
 bh=8AkI+JhyhLwBPZB2QNS3wrj3cefrTZBAxqM/5iAusSE=;
 b=o5gwQlXCk4Kszjt3m0VHzujO6ZM3KtjHIU/0PEbglRDS2M8VLCFn/PxglUsTWiPGi6
 tJQjbVVNn6xMp384GGUj5xKtwwl5QbY8IqLMsp8q3uC8nJtkonRn3nsl2LuXMEhCxANL
 NxFFyUknwRT4jmDuHQC6pHLPoCuUzskx5MVyE=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:from:to:cc:subject:organization:references
 :mail-copies-to:gmane-reply-to-list:date:in-reply-to:message-id
 :user-agent:mime-version:content-type;
 bh=8AkI+JhyhLwBPZB2QNS3wrj3cefrTZBAxqM/5iAusSE=;
 b=FE+szQ+uZeI9fmRmVbWQAic/8TENhWgqmYpibzwqllrsRu02i+xnu/o39lsFVp+PFN
 fykZZmyeQhHdvTweKg+RkaVcZi92MhCKG9hMla3/gHjS0VlMHqbzyDtF6OV54m1+uX09
 TPka/uB0NzuGTEFMZeZuGH8ESSLUIhz2dvxi3OMroRV7PjrLOhufu7bHN3Hw9VnWBVW6
 QTuikBx8RLGAnT4ndYEnTVs3+nUJ156GZ6IUNN5O1ZCXNUmZBo4X+98SdtkmxvInB5aA
 s9HCAo6kwRzkhUqoKZnj+PqVHrXThXnQDioxdh8bkIUjso/t18QdeUrtlAmyCdSilS0l
 JyMg==
X-Gm-Message-State: ALoCoQnF0W6vzuEZIu/9K0e8N7xSVl4RwJLF7pG7yzx0Uv33HKNxriPiGiuaM88lwRatk7FzqBvMHjZHEncmixvP67j7ropUYw==
X-Received: by 10.55.71.143 with SMTP id u137mr85773911qka.1.1451487178033;
 Wed, 30 Dec 2015 06:52:58 -0800 (PST)
Received: from flea ([98.229.60.157])
 by smtp.gmail.com with ESMTPSA id 2sm31128573qgi.42.2015.12.30.06.52.56
 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Wed, 30 Dec 2015 06:52:57 -0800 (PST)
From: Ted Zlatanov <tzz@HIDDEN>
To: Lars Ingebrigtsen <larsi@HIDDEN>
Subject: Re: bug#20960: handling /etc/ssl/certs/ca-bundle.crt by default in
 emacs
Organization: =?utf-8?B?0KLQtdC+0LTQvtGAINCX0LvQsNGC0LDQvdC+0LI=?= @ Cienfuegos
References: <55950B13.1040406@HIDDEN> <83d20a1udy.fsf@HIDDEN>
 <cr4mlmtvri.fsf@HIDDEN>
 <jwvr3oqttme.fsf-monnier+emacsbugs@HIDDEN> <87wps1orm3.fsf@HIDDEN>
 <87oada1bbz.fsf@HIDDEN> <87y4ceqk9e.fsf@HIDDEN>
X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6;
 d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT=
 D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx"
Mail-Copies-To: never
Gmane-Reply-To-List: yes
Date: Wed, 30 Dec 2015 09:52:56 -0500
In-Reply-To: <87y4ceqk9e.fsf@HIDDEN> (Lars Ingebrigtsen's message of "Mon,
 28 Dec 2015 23:30:05 +0100")
Message-ID: <87si2kyomv.fsf@HIDDEN>
User-Agent: Gnus/5.130012 (Ma Gnus v0.12) Emacs/25.0.50 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 20960
Cc: 20960 <at> debbugs.gnu.org, Stefan Monnier <monnier@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.7 (/)

On Mon, 28 Dec 2015 23:30:05 +0100 Lars Ingebrigtsen <larsi@HIDDEN> wrote: 

LI> Ted Zlatanov <tzz@HIDDEN> writes:
>> We can make `gnutls-trustfiles' support directories?

LI> Sure, that would help.

It should be fairly easy to add... just two questions:

Would it be enough to use `directory-files' with the .pem and .crt
extensions, case-insensitively? Should it be recursive?

Thanks
Ted




Information forwarded to bug-gnu-emacs@HIDDEN, bugs@HIDDEN:
bug#20960; Package emacs,gnus. Full text available.

Message received at 20960 <at> debbugs.gnu.org:


Received: (at 20960) by debbugs.gnu.org; 28 Dec 2015 22:30:36 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon Dec 28 17:30:36 2015
Received: from localhost ([127.0.0.1]:46878 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1aDgJH-0002l8-Ru
	for submit <at> debbugs.gnu.org; Mon, 28 Dec 2015 17:30:36 -0500
Received: from hermes.netfonds.no ([80.91.224.195]:39811)
 by debbugs.gnu.org with esmtp (Exim 4.84)
 (envelope-from <larsi@HIDDEN>) id 1aDgJF-0002ky-Oh
 for 20960 <at> debbugs.gnu.org; Mon, 28 Dec 2015 17:30:34 -0500
Received: from 2.150.58.24.tmi.telenormobil.no ([2.150.58.24] helo=mouse)
 by hermes.netfonds.no with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16)
 (Exim 4.72) (envelope-from <larsi@HIDDEN>)
 id 1aDgIn-00076s-VT; Mon, 28 Dec 2015 23:30:06 +0100
From: Lars Ingebrigtsen <larsi@HIDDEN>
To: Stefan Monnier <monnier@HIDDEN>
Subject: Re: bug#20960: handling /etc/ssl/certs/ca-bundle.crt by default in
 emacs
References: <55950B13.1040406@HIDDEN> <83d20a1udy.fsf@HIDDEN>
 <cr4mlmtvri.fsf@HIDDEN>
 <jwvr3oqttme.fsf-monnier+emacsbugs@HIDDEN> <87wps1orm3.fsf@HIDDEN>
 <87oada1bbz.fsf@HIDDEN>
Date: Mon, 28 Dec 2015 23:30:05 +0100
In-Reply-To: <87oada1bbz.fsf@HIDDEN> (Ted Zlatanov's message of "Mon, 28
 Dec 2015 17:02:08 -0500")
Message-ID: <87y4ceqk9e.fsf@HIDDEN>
User-Agent: Gnus/5.130014 (Ma Gnus v0.14) Emacs/25.1.50 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-MailScanner-ID: 1aDgIn-00076s-VT
X-Netfonds-MailScanner: Found to be clean
X-Netfonds-MailScanner-From: larsi@HIDDEN
MailScanner-NULL-Check: 1451946606.48@m4R/LYyb1pFdUTRZZK0cqg
X-Spam-Status: No
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 20960
Cc: 20960 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.7 (/)

Ted Zlatanov <tzz@HIDDEN> writes:

> We can make `gnutls-trustfiles' support directories?

Sure, that would help.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no




Information forwarded to bug-gnu-emacs@HIDDEN, bugs@HIDDEN:
bug#20960; Package emacs,gnus. Full text available.

Message received at 20960 <at> debbugs.gnu.org:


Received: (at 20960) by debbugs.gnu.org; 28 Dec 2015 22:02:24 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon Dec 28 17:02:24 2015
Received: from localhost ([127.0.0.1]:46831 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1aDfrw-0001zi-Md
	for submit <at> debbugs.gnu.org; Mon, 28 Dec 2015 17:02:24 -0500
Received: from mail-qg0-f43.google.com ([209.85.192.43]:33480)
 by debbugs.gnu.org with esmtp (Exim 4.84)
 (envelope-from <tzz@HIDDEN>) id 1aDfrr-0001zS-U7
 for 20960 <at> debbugs.gnu.org; Mon, 28 Dec 2015 17:02:19 -0500
Received: by mail-qg0-f43.google.com with SMTP id b35so25141405qge.0
 for <20960 <at> debbugs.gnu.org>; Mon, 28 Dec 2015 14:02:15 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lifelogs.com; s=google;
 h=from:to:cc:subject:organization:references:mail-copies-to
 :gmane-reply-to-list:date:in-reply-to:message-id:user-agent
 :mime-version:content-type;
 bh=GEVhIKR97cldfJ+OODFB0twh+CTLUfRAQH1Q+4X4lEg=;
 b=SjbfotKUlLiJdvAtoXYBNTiHakn357dr8NbUKzxAi7RFzuNka2R2JvVv+QmsDIyqqM
 1Zaf5/nOEEi8nytEN7bYr1n3LuxV6hslsS6chjWodJr3cg6YxezOC8jxo/ZpPlXxgtAT
 A1Q+2PPxVHXg+460IN08v6W04ow+R2sfQ72cI=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:from:to:cc:subject:organization:references
 :mail-copies-to:gmane-reply-to-list:date:in-reply-to:message-id
 :user-agent:mime-version:content-type;
 bh=GEVhIKR97cldfJ+OODFB0twh+CTLUfRAQH1Q+4X4lEg=;
 b=Q12byoz+SnnjLuCn2SO4qkKXTF82H/2dvpMKcpqZx/2UVrMzLitXUEvq7u8bPMSgXa
 80/LMck9pGe4OErVK3DmNVx00g6CGeHtOqBPdVbbMpYGyQ0kzO7LsdiFsM1o/H2fEzSv
 9gEGUFsmHhzWq2W+NLX5oguowbBmC2vSaIAtDxEBP9+tzi5Acb3c9eiCNU1uHx3BtQRA
 Iz8Rh1QDqRO+AhZUXycioK9UIwSBFaNbYIwLAWbAy6K8dgK5T06+55cAkrCW4CIfR2YY
 FWnnqzKGGBEK8BzhcLCGg6YN/Gnupt5lnndUE5GoIrac5LUmjK+nbKb8k3I1HsFeptz7
 9YZQ==
X-Gm-Message-State: ALoCoQnaFWzY5i3qwpJXlOc1Hwp/7QTPATAnLbSRtah5t948RZ6ItmQL7WvQpDdkuU5SBy8xiUAs6VeIbHvWtnFj+xdytjjyBQ==
X-Received: by 10.140.109.100 with SMTP id k91mr74092706qgf.23.1451340130510; 
 Mon, 28 Dec 2015 14:02:10 -0800 (PST)
Received: from flea ([98.229.60.157])
 by smtp.gmail.com with ESMTPSA id z2sm27806021qhz.38.2015.12.28.14.02.09
 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Mon, 28 Dec 2015 14:02:09 -0800 (PST)
From: Ted Zlatanov <tzz@HIDDEN>
To: Lars Ingebrigtsen <larsi@HIDDEN>
Subject: Re: bug#20960: handling /etc/ssl/certs/ca-bundle.crt by default in
 emacs
Organization: =?utf-8?B?0KLQtdC+0LTQvtGAINCX0LvQsNGC0LDQvdC+0LI=?= @ Cienfuegos
References: <55950B13.1040406@HIDDEN> <83d20a1udy.fsf@HIDDEN>
 <cr4mlmtvri.fsf@HIDDEN>
 <jwvr3oqttme.fsf-monnier+emacsbugs@HIDDEN> <87wps1orm3.fsf@HIDDEN>
X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6;
 d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT=
 D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx"
Mail-Copies-To: never
Gmane-Reply-To-List: yes
Date: Mon, 28 Dec 2015 17:02:08 -0500
In-Reply-To: <87wps1orm3.fsf@HIDDEN> (Lars Ingebrigtsen's message of "Sat,
 26 Dec 2015 21:57:24 +0100")
Message-ID: <87oada1bbz.fsf@HIDDEN>
User-Agent: Gnus/5.130012 (Ma Gnus v0.12) Emacs/25.0.50 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 20960
Cc: 20960 <at> debbugs.gnu.org, Stefan Monnier <monnier@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.7 (/)

On Sat, 26 Dec 2015 21:57:24 +0100 Lars Ingebrigtsen <larsi@HIDDEN> wrote: 

LI> Stefan Monnier <monnier@HIDDEN> writes:
>>> that exists, similar to what gnutls-trustfiles does. (Do these two
>>> variables duplicate each other?)
>> 
>> Yes, I believe they are duplicates (with smime-CA-directory predating
>> the gnutls thingy).

LI> smime-CA-directory should be rewritten to use gnutls-trustfiles (if
LI> gnutls-trustfiles exists).  The minor complication is that the former is
LI> a directory and the latter is a list of files, so it wouldn't be exactly
LI> backwards compatible...

We can make `gnutls-trustfiles' support directories?

Ted




Information forwarded to bug-gnu-emacs@HIDDEN, bugs@HIDDEN:
bug#20960; Package emacs,gnus. Full text available.

Message received at 20960 <at> debbugs.gnu.org:


Received: (at 20960) by debbugs.gnu.org; 26 Dec 2015 20:57:55 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Dec 26 15:57:55 2015
Received: from localhost ([127.0.0.1]:42188 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1aCvuV-0008MI-30
	for submit <at> debbugs.gnu.org; Sat, 26 Dec 2015 15:57:55 -0500
Received: from hermes.netfonds.no ([80.91.224.195]:57113)
 by debbugs.gnu.org with esmtp (Exim 4.84)
 (envelope-from <larsi@HIDDEN>) id 1aCvuT-0008MA-Fp
 for 20960 <at> debbugs.gnu.org; Sat, 26 Dec 2015 15:57:54 -0500
Received: from 2.150.58.24.tmi.telenormobil.no ([2.150.58.24] helo=mouse)
 by hermes.netfonds.no with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16)
 (Exim 4.72) (envelope-from <larsi@HIDDEN>)
 id 1aCvu1-000507-VU; Sat, 26 Dec 2015 21:57:26 +0100
From: Lars Ingebrigtsen <larsi@HIDDEN>
To: Stefan Monnier <monnier@HIDDEN>
Subject: Re: bug#20960: handling /etc/ssl/certs/ca-bundle.crt by default in
 emacs
References: <55950B13.1040406@HIDDEN> <83d20a1udy.fsf@HIDDEN>
 <cr4mlmtvri.fsf@HIDDEN>
 <jwvr3oqttme.fsf-monnier+emacsbugs@HIDDEN>
Date: Sat, 26 Dec 2015 21:57:24 +0100
In-Reply-To: <jwvr3oqttme.fsf-monnier+emacsbugs@HIDDEN> (Stefan Monnier's
 message of "Thu, 02 Jul 2015 12:25:23 -0400")
Message-ID: <87wps1orm3.fsf@HIDDEN>
User-Agent: Gnus/5.130014 (Ma Gnus v0.14) Emacs/25.1.50 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-MailScanner-ID: 1aCvu1-000507-VU
X-Netfonds-MailScanner: Found to be clean
X-Netfonds-MailScanner-From: larsi@HIDDEN
MailScanner-NULL-Check: 1451768246.24934@8+aUU1kEuFiKQU5VaY+O8Q
X-Spam-Status: No
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 20960
Cc: Glenn Morris <rgm@HIDDEN>, 20960 <at> debbugs.gnu.org,
 Eli Zaretskii <eliz@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.7 (/)

Stefan Monnier <monnier@HIDDEN> writes:

>> that exists, similar to what gnutls-trustfiles does. (Do these two
>> variables duplicate each other?)
>
> Yes, I believe they are duplicates (with smime-CA-directory predating
> the gnutls thingy).

smime-CA-directory should be rewritten to use gnutls-trustfiles (if
gnutls-trustfiles exists).  The minor complication is that the former is
a directory and the latter is a list of files, so it wouldn't be exactly
backwards compatible...

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no




Information forwarded to bug-gnu-emacs@HIDDEN, bugs@HIDDEN:
bug#20960; Package emacs,gnus. Full text available.

Message received at 20960 <at> debbugs.gnu.org:


Received: (at 20960) by debbugs.gnu.org; 2 Jul 2015 22:18:21 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Thu Jul 02 18:18:21 2015
Received: from localhost ([127.0.0.1]:37995 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.80)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1ZAmoH-0007RJ-4B
	for submit <at> debbugs.gnu.org; Thu, 02 Jul 2015 18:18:21 -0400
Received: from eggs.gnu.org ([208.118.235.92]:42392)
 by debbugs.gnu.org with esmtp (Exim 4.80)
 (envelope-from <rgm@HIDDEN>) id 1ZAmoF-0007R7-35
 for 20960 <at> debbugs.gnu.org; Thu, 02 Jul 2015 18:18:19 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <rgm@HIDDEN>) id 1ZAmo9-0000Ci-0a
 for 20960 <at> debbugs.gnu.org; Thu, 02 Jul 2015 18:18:13 -0400
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.5 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD
 autolearn=disabled version=3.3.2
Received: from fencepost.gnu.org ([2001:4830:134:3::e]:44453)
 by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from <rgm@HIDDEN>)
 id 1ZAmo5-0000An-83; Thu, 02 Jul 2015 18:18:09 -0400
Received: from rgm by fencepost.gnu.org with local (Exim 4.82)
 (envelope-from <rgm@HIDDEN>)
 id 1ZAmo4-0001DK-Iy; Thu, 02 Jul 2015 18:18:08 -0400
From: Glenn Morris <rgm@HIDDEN>
To: Eli Zaretskii <eliz@HIDDEN>
Subject: Re: bug#20960: handling /etc/ssl/certs/ca-bundle.crt by default in
 emacs
References: <55950B13.1040406@HIDDEN> <83d20a1udy.fsf@HIDDEN>
 <cr4mlmtvri.fsf@HIDDEN> <838uay1qtx.fsf@HIDDEN>
X-Spook: FTS2000 Medco Venezuela Elvis PET Semtex Scammers JPL
X-Ran: XQ,?uwqPghd>g++#i\vlk<t~}m<KPHoA}7WgkL~c9&giyW6u?-I#v|]):.pt?Ohu8"zAY=
X-Hue: white
X-Debbugs-No-Ack: yes
X-Attribution: GM
Date: Thu, 02 Jul 2015 18:18:08 -0400
In-Reply-To: <838uay1qtx.fsf@HIDDEN> (Eli Zaretskii's message of "Thu, 02 Jul
 2015 19:12:26 +0300")
Message-ID: <xdpp4atd9b.fsf@HIDDEN>
User-Agent: Gnus (www.gnus.org), GNU Emacs (www.gnu.org/software/emacs/)
MIME-Version: 1.0
Content-Type: text/plain
X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address
 (bad octet value).
X-Received-From: 2001:4830:134:3::e
X-Spam-Score: -5.6 (-----)
X-Debbugs-Envelope-To: 20960
Cc: phracek@HIDDEN, 20960 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -5.6 (-----)

Eli Zaretskii wrote:

>> So let's compile a list of the standard places and default to the first
>> that exists
>
> Is that really TRT?  I don't use Gnus, but smime.el seems to want a
> place to keep certificates of people/organizations from which you get
> MIME messages.  How probable it is to find them in the bundles
> distributed by the OS?

I don't use it either, and have no idea what it is supposed to be for.
But

https://bugzilla.redhat.com/show_bug.cgi?id=1131558

says it helped. But as I say, the value it's being set to isn't a
directory, so it makes little sense to me.




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#20960; Package emacs. Full text available.

Message received at 20960 <at> debbugs.gnu.org:


Received: (at 20960) by debbugs.gnu.org; 2 Jul 2015 16:26:31 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Thu Jul 02 12:26:31 2015
Received: from localhost ([127.0.0.1]:37875 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.80)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1ZAhJn-0007a1-14
	for submit <at> debbugs.gnu.org; Thu, 02 Jul 2015 12:26:31 -0400
Received: from ironport2-out.teksavvy.com ([206.248.154.181]:58888)
 by debbugs.gnu.org with esmtp (Exim 4.80)
 (envelope-from <monnier@HIDDEN>) id 1ZAhJl-0007Zm-4f
 for 20960 <at> debbugs.gnu.org; Thu, 02 Jul 2015 12:26:29 -0400
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0AsEwA731xV/2cGNJ1cgxCEAoVVuzcJh0sEAgKBPDkUAQEBAQEBAYEKQQWDXQEBAwFWIwULCw4mEhQYDSSINwjPIwEBAQEBBQEBAQEeizqFBQeELQW1BCOEFCKCeAEBAQ
X-IPAS-Result: A0AsEwA731xV/2cGNJ1cgxCEAoVVuzcJh0sEAgKBPDkUAQEBAQEBAYEKQQWDXQEBAwFWIwULCw4mEhQYDSSINwjPIwEBAQEBBQEBAQEeizqFBQeELQW1BCOEFCKCeAEBAQ
X-IronPort-AV: E=Sophos;i="5.13,465,1427774400"; d="scan'208";a="129065218"
Received: from 157-52-6-103.cpe.teksavvy.com (HELO pastel.home)
 ([157.52.6.103])
 by ironport2-out.teksavvy.com with ESMTP; 02 Jul 2015 12:25:23 -0400
Received: by pastel.home (Postfix, from userid 20848)
 id 3D1B76165D; Thu,  2 Jul 2015 12:25:23 -0400 (EDT)
From: Stefan Monnier <monnier@HIDDEN>
To: Glenn Morris <rgm@HIDDEN>
Subject: Re: bug#20960: handling /etc/ssl/certs/ca-bundle.crt by default in
 emacs
Message-ID: <jwvr3oqttme.fsf-monnier+emacsbugs@HIDDEN>
References: <55950B13.1040406@HIDDEN> <83d20a1udy.fsf@HIDDEN>
 <cr4mlmtvri.fsf@HIDDEN>
Date: Thu, 02 Jul 2015 12:25:23 -0400
In-Reply-To: <cr4mlmtvri.fsf@HIDDEN> (Glenn Morris's message of
 "Thu, 02 Jul 2015 11:38:25 -0400")
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.0.50 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: 0.3 (/)
X-Debbugs-Envelope-To: 20960
Cc: Eli Zaretskii <eliz@HIDDEN>, 20960 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.3 (/)

> that exists, similar to what gnutls-trustfiles does. (Do these two
> variables duplicate each other?)

Yes, I believe they are duplicates (with smime-CA-directory predating
the gnutls thingy).


        Stefan




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#20960; Package emacs. Full text available.

Message received at 20960 <at> debbugs.gnu.org:


Received: (at 20960) by debbugs.gnu.org; 2 Jul 2015 16:12:26 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Thu Jul 02 12:12:25 2015
Received: from localhost ([127.0.0.1]:37846 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.80)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1ZAh69-0007ED-81
	for submit <at> debbugs.gnu.org; Thu, 02 Jul 2015 12:12:25 -0400
Received: from mtaout23.012.net.il ([80.179.55.175]:44917)
 by debbugs.gnu.org with esmtp (Exim 4.80)
 (envelope-from <eliz@HIDDEN>) id 1ZAh66-0007Dw-DG
 for 20960 <at> debbugs.gnu.org; Thu, 02 Jul 2015 12:12:23 -0400
Received: from conversion-daemon.a-mtaout23.012.net.il by
 a-mtaout23.012.net.il (HyperSendmail v2007.08) id
 <0NQV00D00BCG3H00@HIDDEN> for 20960 <at> debbugs.gnu.org;
 Thu, 02 Jul 2015 19:12:16 +0300 (IDT)
Received: from HOME-C4E4A596F7 ([87.69.4.28]) by a-mtaout23.012.net.il
 (HyperSendmail v2007.08) with ESMTPA id
 <0NQV00DWUBOF3P00@HIDDEN>;
 Thu, 02 Jul 2015 19:12:16 +0300 (IDT)
Date: Thu, 02 Jul 2015 19:12:26 +0300
From: Eli Zaretskii <eliz@HIDDEN>
Subject: Re: bug#20960: handling /etc/ssl/certs/ca-bundle.crt by default in
 emacs
In-reply-to: <cr4mlmtvri.fsf@HIDDEN>
X-012-Sender: halo1@HIDDEN
To: Glenn Morris <rgm@HIDDEN>
Message-id: <838uay1qtx.fsf@HIDDEN>
References: <55950B13.1040406@HIDDEN> <83d20a1udy.fsf@HIDDEN>
 <cr4mlmtvri.fsf@HIDDEN>
X-Spam-Score: 1.0 (+)
X-Debbugs-Envelope-To: 20960
Cc: phracek@HIDDEN, 20960 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: Eli Zaretskii <eliz@HIDDEN>
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 1.0 (+)

> From: Glenn Morris <rgm@HIDDEN>
> Cc: Petr Hracek <phracek@HIDDEN>,  20960 <at> debbugs.gnu.org
> Date: Thu, 02 Jul 2015 11:38:25 -0400
> 
> So let's compile a list of the standard places and default to the first
> that exists

Is that really TRT?  I don't use Gnus, but smime.el seems to want a
place to keep certificates of people/organizations from which you get
MIME messages.  How probable it is to find them in the bundles
distributed by the OS?

I thought the user is supposed to collect the certificates for this
purpose, and keep them in this directory.  IOW, these are not
system-wide certificates.

> similar to what gnutls-trustfiles does. (Does these two variables
> duplicate each other?)

gnutls-trustfiles should not be needed, except with old versions of
GnuTLS.  The library now finds and uses the system-provided bundle
automatically (and on Windows the system certificates are not kept in
a disk file).




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#20960; Package emacs. Full text available.

Message received at 20960 <at> debbugs.gnu.org:


Received: (at 20960) by debbugs.gnu.org; 2 Jul 2015 15:38:42 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Thu Jul 02 11:38:42 2015
Received: from localhost ([127.0.0.1]:37825 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.80)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1ZAgZW-0006OH-6O
	for submit <at> debbugs.gnu.org; Thu, 02 Jul 2015 11:38:42 -0400
Received: from eggs.gnu.org ([208.118.235.92]:32819)
 by debbugs.gnu.org with esmtp (Exim 4.80)
 (envelope-from <rgm@HIDDEN>) id 1ZAgZU-0006O5-D9
 for 20960 <at> debbugs.gnu.org; Thu, 02 Jul 2015 11:38:40 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <rgm@HIDDEN>) id 1ZAgZO-0000kA-8a
 for 20960 <at> debbugs.gnu.org; Thu, 02 Jul 2015 11:38:34 -0400
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-1.2 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD,
 UNRESOLVED_TEMPLATE autolearn=disabled version=3.3.2
Received: from fencepost.gnu.org ([2001:4830:134:3::e]:37607)
 by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from <rgm@HIDDEN>)
 id 1ZAgZI-0000iO-3k; Thu, 02 Jul 2015 11:38:28 -0400
Received: from rgm by fencepost.gnu.org with local (Exim 4.82)
 (envelope-from <rgm@HIDDEN>)
 id 1ZAgZF-0005Tb-V9; Thu, 02 Jul 2015 11:38:26 -0400
From: Glenn Morris <rgm@HIDDEN>
To: Eli Zaretskii <eliz@HIDDEN>
Subject: Re: bug#20960: handling /etc/ssl/certs/ca-bundle.crt by default in
 emacs
References: <55950B13.1040406@HIDDEN> <83d20a1udy.fsf@HIDDEN>
X-Spook: Watch Bletchley Park Ciudad Juarez Al Qa'ida Organized
X-Ran: e`y#*!sEP;M~[cjq{yY5+QxJN_T#z^o#?CBP}"8qF0?"<dvF8f{?;,]aLe%XZr~%?c2ZtV
X-Hue: green
X-Debbugs-No-Ack: yes
X-Attribution: GM
Date: Thu, 02 Jul 2015 11:38:25 -0400
In-Reply-To: <83d20a1udy.fsf@HIDDEN> (Eli Zaretskii's message of "Thu, 02 Jul
 2015 17:55:37 +0300")
Message-ID: <cr4mlmtvri.fsf@HIDDEN>
User-Agent: Gnus (www.gnus.org), GNU Emacs (www.gnu.org/software/emacs/)
MIME-Version: 1.0
Content-Type: text/plain
X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address
 (bad octet value).
X-Received-From: 2001:4830:134:3::e
X-Spam-Score: -4.9 (----)
X-Debbugs-Envelope-To: 20960
Cc: Petr Hracek <phracek@HIDDEN>, 20960 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -4.9 (----)

Eli Zaretskii wrote:

>> (setq smime-CA-directory "/etc/ssl/certs/ca-bundle.crt")

On my RHEL7 system, this isn't a directory.
It is a symlink to /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem,
a file.

> That file name is platform-dependent, and even on Unix the bundle can
> be found in several different directories.

So let's compile a list of the standard places and default to the first
that exists, similar to what gnutls-trustfiles does. (Does these two
variables duplicate each other?)




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#20960; Package emacs. Full text available.

Message received at 20960 <at> debbugs.gnu.org:


Received: (at 20960) by debbugs.gnu.org; 2 Jul 2015 14:55:40 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Thu Jul 02 10:55:40 2015
Received: from localhost ([127.0.0.1]:37792 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.80)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1ZAftq-0005Lo-Qz
	for submit <at> debbugs.gnu.org; Thu, 02 Jul 2015 10:55:39 -0400
Received: from mtaout20.012.net.il ([80.179.55.166]:51384)
 by debbugs.gnu.org with esmtp (Exim 4.80)
 (envelope-from <eliz@HIDDEN>) id 1ZAftn-0005LY-Ig
 for 20960 <at> debbugs.gnu.org; Thu, 02 Jul 2015 10:55:36 -0400
Received: from conversion-daemon.a-mtaout20.012.net.il by
 a-mtaout20.012.net.il (HyperSendmail v2007.08) id
 <0NQV00F007SE3H00@HIDDEN> for 20960 <at> debbugs.gnu.org;
 Thu, 02 Jul 2015 17:55:27 +0300 (IDT)
Received: from HOME-C4E4A596F7 ([87.69.4.28]) by a-mtaout20.012.net.il
 (HyperSendmail v2007.08) with ESMTPA id
 <0NQV00EZ184FTFC0@HIDDEN>;
 Thu, 02 Jul 2015 17:55:27 +0300 (IDT)
Date: Thu, 02 Jul 2015 17:55:37 +0300
From: Eli Zaretskii <eliz@HIDDEN>
Subject: Re: bug#20960: handling /etc/ssl/certs/ca-bundle.crt by default in
 emacs
In-reply-to: <55950B13.1040406@HIDDEN>
X-012-Sender: halo1@HIDDEN
To: Petr Hracek <phracek@HIDDEN>
Message-id: <83d20a1udy.fsf@HIDDEN>
References: <55950B13.1040406@HIDDEN>
X-Spam-Score: 1.0 (+)
X-Debbugs-Envelope-To: 20960
Cc: 20960 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: Eli Zaretskii <eliz@HIDDEN>
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 1.0 (+)

> Date: Thu, 02 Jul 2015 11:57:39 +0200
> From: Petr Hracek <phracek@HIDDEN>
> 
> I have a question to upstream whether CA directory
> could be handled by upstream by default?

What do you mean by "upstream"?  Upstream Emacs?

> (setq smime-CA-directory "/etc/ssl/certs/ca-bundle.crt")

That file name is platform-dependent, and even on Unix the bundle can
be found in several different directories.




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#20960; Package emacs. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 2 Jul 2015 09:57:52 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Thu Jul 02 05:57:52 2015
Received: from localhost ([127.0.0.1]:36958 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.80)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1ZAbFf-0005DH-VW
	for submit <at> debbugs.gnu.org; Thu, 02 Jul 2015 05:57:52 -0400
Received: from eggs.gnu.org ([208.118.235.92]:54305)
 by debbugs.gnu.org with esmtp (Exim 4.80)
 (envelope-from <phracek@HIDDEN>) id 1ZAbFd-0005D5-T1
 for submit <at> debbugs.gnu.org; Thu, 02 Jul 2015 05:57:50 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <phracek@HIDDEN>) id 1ZAbFX-0003a2-KH
 for submit <at> debbugs.gnu.org; Thu, 02 Jul 2015 05:57:44 -0400
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=disabled
 version=3.3.2
Received: from lists.gnu.org ([2001:4830:134:3::11]:47155)
 by eggs.gnu.org with esmtp (Exim 4.71)
 (envelope-from <phracek@HIDDEN>) id 1ZAbFX-0003Zx-He
 for submit <at> debbugs.gnu.org; Thu, 02 Jul 2015 05:57:43 -0400
Received: from eggs.gnu.org ([2001:4830:134:3::10]:39568)
 by lists.gnu.org with esmtp (Exim 4.71)
 (envelope-from <phracek@HIDDEN>) id 1ZAbFW-0004hn-Jq
 for bug-gnu-emacs@HIDDEN; Thu, 02 Jul 2015 05:57:43 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <phracek@HIDDEN>) id 1ZAbFV-0003ZW-Ok
 for bug-gnu-emacs@HIDDEN; Thu, 02 Jul 2015 05:57:42 -0400
Received: from mx1.redhat.com ([209.132.183.28]:47014)
 by eggs.gnu.org with esmtp (Exim 4.71)
 (envelope-from <phracek@HIDDEN>) id 1ZAbFV-0003ZN-JO
 for bug-gnu-emacs@HIDDEN; Thu, 02 Jul 2015 05:57:41 -0400
Received: from int-mx10.intmail.prod.int.phx2.redhat.com
 (int-mx10.intmail.prod.int.phx2.redhat.com [10.5.11.23])
 by mx1.redhat.com (Postfix) with ESMTPS id 1E68A373BC5
 for <bug-gnu-emacs@HIDDEN>; Thu,  2 Jul 2015 09:57:41 +0000 (UTC)
Received: from [10.34.4.133] (unused-4-133.brq.redhat.com [10.34.4.133])
 by int-mx10.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id
 t629vddA028856
 for <bug-gnu-emacs@HIDDEN>; Thu, 2 Jul 2015 05:57:40 -0400
Message-ID: <55950B13.1040406@HIDDEN>
Date: Thu, 02 Jul 2015 11:57:39 +0200
From: Petr Hracek <phracek@HIDDEN>
User-Agent: Mozilla/5.0 (X11; Linux x86_64;
 rv:31.0) Gecko/20100101 Thunderbird/31.7.0
MIME-Version: 1.0
To: bug-gnu-emacs@HIDDEN
Subject: handling /etc/ssl/certs/ca-bundle.crt by default in emacs
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Scanned-By: MIMEDefang 2.68 on 10.5.11.23
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x
X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address
 (bad octet value).
X-Received-From: 2001:4830:134:3::11
X-Spam-Score: -5.0 (-----)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -5.0 (-----)

HI folks,

I have a question to upstream whether CA directory
could be handled by upstream by default?

(setq smime-CA-directory "/etc/ssl/certs/ca-bundle.crt")

Or may be how it could be done by emacs packaging in Fedora?

https://bugzilla.redhat.com/show_bug.cgi?id=1131558

-- 
Petr Hracek
Software Engineer
Developer Experience
Red Hat, Inc
Mob: +420777056169
email: phracek@HIDDEN





Acknowledgement sent to Petr Hracek <phracek@HIDDEN>:
New bug report received and forwarded. Copy sent to bug-gnu-emacs@HIDDEN. Full text available.
Report forwarded to bug-gnu-emacs@HIDDEN:
bug#20960; Package emacs. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Mon, 25 Nov 2019 12:00:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.