[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Auto plugged off?

At Sun, 27 Jun 2010 18:26:02 +0900 (JST),
Tatsuya Kinoshita <tats@vega.ocn.ne.jp> wrote:
> | To use the ssl feature, install the gnutls-bin package and the
> | ca-certificates package.  In the startup file
> | (/etc/emacs/site-start.d/*wl-beta.el), ssl-program-name is set to
> | gnutls-cli instead openssl, and ssl-program-arguments is set to verify
> | certificates.  If you encounter a connection failure, execute gnutls-cli
> | directly to diagnose.  See also the manual of gnutls-cli.
> | 
> | (setq ssl-program-name "gnutls-cli")
> | (setq ssl-program-arguments
> |  '("--port" service
> |    "--x509cafile" "/etc/ssl/certs/ca-certificates.crt" ;; verify certificates
> |    host))
I have just upgraded to debian's wl-beta package from the Ubuntu one,
thank you Tatsuya.

However I can't now access one of my imap accounts due to a
certificate problem. Running the command shown above yields:
Resolving 'imap.student.gla.ac.uk'...
Connecting to '130.209.14.155:993'...
- Certificate type: X.509
 - Got a certificate list of 2 certificates.
 - Certificate[0] info:
  - subject `C=GB,ST=Scotland,L=Glasgow,O=University of Glasgow,OU=IT Services,CN=imap.gla.ac.uk', issuer `C=BE,O=Cybertrust,OU=Educational CA,CN=Cybertrust Educational CA', RSA key 2048 bits, signed using RSA-SHA, activated `2009-08-12 14:57:14 UTC', expires `2012-08-12 14:57:14 UTC', SHA-1 fingerprint `41655d6147b0ddaa75cfab94a8a80a4f43ab9091'
 - Certificate[1] info:
  - subject `C=BE,O=Cybertrust,OU=Educational CA,CN=Cybertrust Educational CA', issuer `C=US,O=GTE Corporation,OU=GTE CyberTrust Solutions\, Inc.,CN=GTE CyberTrust Global Root', RSA key 2048 bits, signed using RSA-SHA, activated `2006-03-14 20:30:00 UTC', expires `2013-03-14 23:59:00 UTC', SHA-1 fingerprint `60983654d7ec611d76c2cd5557ca47ad3930c9ca'
- The hostname in the certificate matches 'imap.student.gla.ac.uk'.
- Peer's certificate issuer is not a CA
- Peer's certificate is NOT trusted
- Version: TLS1.0
- Key Exchange: RSA
- Cipher: AES-128-CBC
- MAC: SHA1
- Compression: NULL
*** Verifying server certificate failed...

The GTE Cybertrust Global root cert is included in Ubuntu. Can anyone
advise as to the problem?

Thanks

Simon