]> git.eshelyaron.com Git - emacs.git/commitdiff
Fix saving certificates in the NSM on high security levels
authorLars Ingebrigtsen <larsi@gnus.org>
Mon, 15 Jul 2019 18:31:42 +0000 (20:31 +0200)
committerLars Ingebrigtsen <larsi@gnus.org>
Mon, 15 Jul 2019 18:31:42 +0000 (20:31 +0200)
* lisp/net/nsm.el (nsm-check-certificate): `nsm-fingerprint-ok-p'
will save the fingerprint in the correct temporary/permanent
storage, so saving it once more (in the permanent storage) if the
security level is high or greater is a mistake (bug#27823).

lisp/net/nsm.el

index 6a312e2ebb456e58060c85e03079cb6108ee0dcd..dbfa2101f0c230ec9159a72b5a97ee425c3b7e3d 100644 (file)
@@ -149,11 +149,6 @@ unencrypted."
             (not (nsm-new-fingerprint-ok-p host port status)))
        (delete-process process)
        nil)
-       ((>= (nsm-level network-security-level) (nsm-level 'high))
-       ;; Save the host fingerprint so that we can check it the
-       ;; next time we connect.
-       (nsm-save-host host port status 'fingerprint 'always)
-       process)
        (t
        process)))