From: Lars Ingebrigtsen <larsi@gnus.org>
Date: Mon, 15 Jul 2019 18:31:42 +0000 (+0200)
Subject: Fix saving certificates in the NSM on high security levels
X-Git-Tag: emacs-27.0.90~1889
X-Git-Url: http://git.eshelyaron.com/gitweb/?a=commitdiff_plain;h=93e1f7c66f77827bcad7a5636c3edcff685ca19e;p=emacs.git

Fix saving certificates in the NSM on high security levels

* lisp/net/nsm.el (nsm-check-certificate): `nsm-fingerprint-ok-p'
will save the fingerprint in the correct temporary/permanent
storage, so saving it once more (in the permanent storage) if the
security level is high or greater is a mistake (bug#27823).
---

diff --git a/lisp/net/nsm.el b/lisp/net/nsm.el
index 6a312e2ebb4..dbfa2101f0c 100644
--- a/lisp/net/nsm.el
+++ b/lisp/net/nsm.el
@@ -149,11 +149,6 @@ unencrypted."
 	     (not (nsm-new-fingerprint-ok-p host port status)))
 	(delete-process process)
 	nil)
-       ((>= (nsm-level network-security-level) (nsm-level 'high))
-	;; Save the host fingerprint so that we can check it the
-	;; next time we connect.
-	(nsm-save-host host port status 'fingerprint 'always)
-	process)
        (t
 	process)))