Re: [PATCH] GnuTLS support on Woe32

[Robert Pluim]

Ted Zlatanov <address@hidden> writes:

> On Mon, 07 Mar 2011 11:44:56 +0100 Robert Pluim <address@hidden> wrote: 
>
> RP> I modify that comment: builtin TLS support works for me if I set
> RP> 'trustfiles' to nil in gnutls-negotiate, instead of
> RP> "/etc/ssl/certs/ca-certificates.crt", which I don't have.  What is that
> RP> file, and why do I need it all of a sudden? (builtin TLS worked fine for
> RP> me several months ago).
>
> Let us know what the file should be on your platform, if you know.

I wish I did. This is on cygwin, is there a CA bundle you can install
there?

>  This
> is the CA bundle which determines if the signers of any presented
> certificates can be trusted.  I think Emacs should have its own default
> bundle and the user should be able to override to their own preference.

Yes, that would be good.

> I'll add code to test for the file's existence and to customize that file.
>
> RP> PS The error message I got could be improved: "Err [-64] File not found"
> RP> is not really helpful
>
> This error is coming from the GnuTLS library.  It only reports errors
> numerically so gnutls.c needs to be improved to present the error better.

Actually, I'm not sure gnutls.c can do much in that case except show the
parameters it passed to GnuTLS.

Thanks

Robert