bug#16791: w3m fails to do any SSL certificate checking

2016-02-10 Thread Leo Famulari
On Thu, Jan 07, 2016 at 11:55:12PM -0500, Leo Famulari wrote: > On Tue, Jan 05, 2016 at 11:32:14AM -0500, Leo Famulari wrote: > > On Tue, Jan 05, 2016 at 12:35:57AM +0100, Ludovic Courtès wrote: [...] > > > What about using the latest upstream tarball, along with the patch > > > above and probabl

bug#16791: w3m fails to do any SSL certificate checking

2016-01-07 Thread Leo Famulari
On Tue, Jan 05, 2016 at 11:32:14AM -0500, Leo Famulari wrote: > On Tue, Jan 05, 2016 at 12:35:57AM +0100, Ludovic Courtès wrote: > > Leo Famulari skribis: > > > > > On Sat, Jan 02, 2016 at 09:20:30PM -0500, Leo Famulari wrote: > > >> I looked into how Debian does it. They bundle a configuration f

bug#16791: w3m fails to do any SSL certificate checking

2016-01-05 Thread Leo Famulari
On Tue, Jan 05, 2016 at 12:35:57AM +0100, Ludovic Courtès wrote: > Leo Famulari skribis: > > > On Sat, Jan 02, 2016 at 09:20:30PM -0500, Leo Famulari wrote: > >> I looked into how Debian does it. They bundle a configuration file that > >> sets the correct options. > >> > >> If you download the "

bug#16791: w3m fails to do any SSL certificate checking

2016-01-04 Thread Ludovic Courtès
Leo Famulari skribis: > On Sat, Jan 02, 2016 at 09:20:30PM -0500, Leo Famulari wrote: >> I looked into how Debian does it. They bundle a configuration file that >> sets the correct options. >> >> If you download the "debian" file [0], which includes all of their >> packaging for w3m, you can vie

bug#16791: w3m fails to do any SSL certificate checking

2016-01-04 Thread Leo Famulari
On Mon, Jan 04, 2016 at 01:19:32AM -0500, Leo Famulari wrote: > On Sat, Jan 02, 2016 at 09:20:30PM -0500, Leo Famulari wrote: > > I looked into how Debian does it. They bundle a configuration file that > > sets the correct options. > > > > If you download the "debian" file [0], which includes all

bug#16791: w3m fails to do any SSL certificate checking

2016-01-03 Thread Leo Famulari
On Sat, Jan 02, 2016 at 09:20:30PM -0500, Leo Famulari wrote: > I looked into how Debian does it. They bundle a configuration file that > sets the correct options. > > If you download the "debian" file [0], which includes all of their > packaging for w3m, you can view the file at 'debian/w3mconfig

bug#16791: w3m fails to do any SSL certificate checking

2016-01-02 Thread Leo Famulari
I looked into how Debian does it. They bundle a configuration file that sets the correct options. If you download the "debian" file [0], which includes all of their packaging for w3m, you can view the file at 'debian/w3mconfig'. The relevant option is "ssl_verify_server", and it must be set to "1

bug#16791: w3m fails to do any SSL certificate checking

2014-02-18 Thread Andreas Enge
I wondered whether the problem lied in our openssl. It does not seem so. "openssl verify cert.pem" on my problematic certificate does print as expected: error 18 at 0 depth lookup:self signed certificate error 10 at 0 depth lookup:certificate has expired Andreas

bug#16791: w3m fails to do any SSL certificate checking

2014-02-18 Thread Andreas Enge
On Tue, Feb 18, 2014 at 03:58:21AM -0500, Mark H Weaver wrote: > In Guix, neither w3m nor emacs-w3m warn me when I visit an https URL > that uses a server certificate that is both self-signed and expired. > To make matters worse, if I ask for page information (with the '=' key), > it tells me that

bug#16791: w3m fails to do any SSL certificate checking

2014-02-18 Thread Mark H Weaver
In Guix, neither w3m nor emacs-w3m warn me when I visit an https URL that uses a server certificate that is both self-signed and expired. To make matters worse, if I ask for page information (with the '=' key), it tells me that the certificate is valid. On Debian, both w3m and emacs-w3m inform me