From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/58414 Path: main.gmane.org!not-for-mail From: "Andrew A. Raines" Newsgroups: gmane.emacs.gnus.general Subject: Re: Setting SSL certificate authority? Date: Wed, 08 Sep 2004 16:01:47 -0500 Sender: ding-owner@lists.math.uh.edu Message-ID: <87656oh3us.fsf@mid.packer.its.vanderbilt.edu> References: NNTP-Posting-Host: deer.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1094677385 16464 80.91.224.253 (8 Sep 2004 21:03:05 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Wed, 8 Sep 2004 21:03:05 +0000 (UTC) Original-X-From: ding-owner+M6956@lists.math.uh.edu Wed Sep 08 23:02:57 2004 Return-path: Original-Received: from malifon.math.uh.edu ([129.7.128.13]) by deer.gmane.org with esmtp (Exim 3.35 #1 (Debian)) id 1C59aj-0002NZ-00 for ; Wed, 08 Sep 2004 23:02:57 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu ident=lists) by malifon.math.uh.edu with smtp (Exim 3.20 #1) id 1C59Z9-0004Oa-00; Wed, 08 Sep 2004 16:01:19 -0500 Original-Received: from util2.math.uh.edu ([129.7.128.23]) by malifon.math.uh.edu with esmtp (Exim 3.20 #1) id 1C59Z0-0004OS-00 for ding@lists.math.uh.edu; Wed, 08 Sep 2004 16:01:10 -0500 Original-Received: from justine.libertine.org ([66.139.78.221] ident=postfix) by util2.math.uh.edu with esmtp (Exim 4.30) id 1C59Z0-0002zz-BY for ding@lists.math.uh.edu; Wed, 08 Sep 2004 16:01:10 -0500 Original-Received: from quimby.gnus.org (quimby.gnus.org [80.91.224.244]) by justine.libertine.org (Postfix) with ESMTP id 92ABC3A0027 for ; Wed, 8 Sep 2004 16:01:05 -0500 (CDT) Original-Received: from news by quimby.gnus.org with local (Exim 3.35 #1 (Debian)) id 1C59Yu-0004NW-00 for ; Wed, 08 Sep 2004 23:01:04 +0200 Original-To: ding@gnus.org Original-Path: not-for-mail Original-Newsgroups: gnus.ding Original-Lines: 15 Original-NNTP-Posting-Host: 129.59.160.108 Original-X-Trace: quimby.gnus.org 1094677264 16004 129.59.160.108 (8 Sep 2004 21:01:04 GMT) Original-X-Complaints-To: usenet@quimby.gnus.org Original-NNTP-Posting-Date: Wed, 8 Sep 2004 21:01:04 +0000 (UTC) X-PGP-Key: http://pobox.com/~aaraines/pubkey.asc Mail-Copies-To: never User-Agent: Gnus/5.110003 (No Gnus v0.3) Emacs/21.3 (gnu/linux) Cancel-Lock: sha1:l9RZzzGdADtiaJWcYpbWhhus9dk= Precedence: bulk Xref: main.gmane.org gmane.emacs.gnus.general:58414 X-Report-Spam: http://spam.gmane.org/gmane.emacs.gnus.general:58414 Dave Abrahams writes: > I've been connecting to my IMAP server with SSL, but the other day > a certificate expired and I had to turn SSL off. My sysadmin has > volunteered to set up a local certificate authority so we can avoid > buying new certificates. That'd be secure enough for me if I knew > how to tell Gnus to use that authority. Can anyone help? The Emacs minibuffer tells me `nnimap-stream ssl' is using openssl s_client under the covers. Can't you just add the CA cert to /etc/ssl/certs or /usr/local/ssl/certs or whatever makes sense for your OpenSSL installation? -- aaraines@pobox.com (Andrew A. Raines)