[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
bug#23027: 25.1.50; Emacs refuses to talk to eternal-september because t
Lars Magne Ingebrigtsen
bug#23027: 25.1.50; Emacs refuses to talk to eternal-september because they now use an MD5 certificate, apparently
Sun, 24 Apr 2016 16:14:52 +0200
Gnus/5.13 (Gnus v5.13) Emacs/25.1.50 (gnu/linux)
address@hidden ~/src/emacs/trunk]$ gnutls-cli -p nntps
Connecting to '220.127.116.11:563'...
*** Fatal error: The signature algorithm is not supported.
*** Handshake has failed
GnuTLS error: The signature algorithm is not supported.
That's not very helpful.
However, on a newer machine it says:
- Certificate info:
- subject `O=Root CA,OU=http://www.cacert.org,CN=CA Cert Signing
Authority,address@hidden', issuer `O=Root CA,OU=http://www.cacert.org,CN=CA
Cert Signing Authority,address@hidden', RSA key 4096 bits, signed using RSA-MD5
(broken!), activated `2003-03-30 12:29:49 UTC', expires `2033-03-29 12:29:49
UTC', SHA-1 fingerprint `135cec36f49cb8e93b1ab270cd80884676ce8f33'
So there's the MD5.
So it like fails on several levels: On older machines, the GnuTLS
library is too old, and on newer machines, it refuses the connection
because of the MD5...
(domestic pets only, the antidote for overdose, milk.)
bloggy blog: http://lars.ingebrigtsen.no