[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Auto plugged off?



On June 27, 2010, [Wanderlust English:03932],
v.mayatskih (at gmail.com) wrote:

>>   Auto plugged off at mail.messagingengine.com:993
>>   :elmo-network-initialize-session
>>   byte-code: Cannot open: elmo-network-initialize-session
> 
> Try to set ssl-certificate-verification-policy to 1 or 2.

ssl-certificate-verification-policy is useless because of the
openssl bug <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=210757>.

To verify certificates, the Debian wl/wl-beta packages have
switched ssl-program-name from openssl to gnutls-cli.

Quoting from Debian wl-beta package version 2.15.9+0.20100525-3,
/usr/share/doc/wl-beta/README.Debian:

| To use the ssl feature, install the gnutls-bin package and the
| ca-certificates package.  In the startup file
| (/etc/emacs/site-start.d/*wl-beta.el), ssl-program-name is set to
| gnutls-cli instead openssl, and ssl-program-arguments is set to verify
| certificates.  If you encounter a connection failure, execute gnutls-cli
| directly to diagnose.  See also the manual of gnutls-cli.
| 
| (setq ssl-program-name "gnutls-cli")
| (setq ssl-program-arguments
|  '("--port" service
|    "--x509cafile" "/etc/ssl/certs/ca-certificates.crt" ;; verify certificates
|    host))

Thanks,
-- 
Tatsuya Kinoshita